CVE-2023-52064: SQL Injection
Published Jan 10, 2024
·Updated
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php.
Affected Software
1 affected component
Wuzhicms Wuzhicms=4.1.0
Event History
Jan 10, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-52064?
CVE-2023-52064 is classified as a critical SQL injection vulnerability in Wuzhi CMS v4.1.0.
2
How do I fix CVE-2023-52064?
To fix CVE-2023-52064, you should sanitize and validate the $keywords parameter in the /core/admin/copyfrom.php file.
3
What systems are affected by CVE-2023-52064?
CVE-2023-52064 affects Wuzhi CMS version 4.1.0.
4
What is the impact of exploiting CVE-2023-52064?
Exploiting CVE-2023-52064 can allow an attacker to execute arbitrary SQL queries on the database.
5
How can I detect if CVE-2023-52064 is present in my Wuzhi CMS installation?
You can detect CVE-2023-52064 by testing for SQL injection flaws in the /core/admin/copyfrom.php endpoint.