Most severe vulnerabilities for "wuzhicms wuzhicms" 4.1.0

Where

AND

Sort:

Wuzhicms WuzhicmsSQL Injection

Risk 86

Severity

9.8

SQL Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file.

First published (updated )

CVE-2021-40669

Wuzhicms WuzhicmsSQL Injection

Risk 86

Severity

9.8

SQL Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file.

First published (updated )

CVE-2021-40670

Wuzhicms WuzhicmsSQL Injection

Risk 86

Severity

9.8

SQL Injection

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php.

First published (updated )

CVE-2021-40674

Wuzhicms WuzhicmsSQL Injection

Risk 86

Severity

9.8

SQL Injection

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893.

First published (updated )

CVE-2018-20572

Wuzhicms WuzhicmsCSRF

Risk 77

Severity

8.8

CSRF

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add an admin account via index.php?m=core&f=power&v=add.

First published (updated )

CVE-2018-9926

Wuzhicms WuzhicmsCSRF

Risk 77

Severity

8.8

CSRF

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a user account via index.php?m=member&f=index&v=add.

First published (updated )

CVE-2018-9927

Wuzhicms WuzhicmsXSS

Risk 25

Severity

5.4

EPSS

0.03%

XSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

wuzhicms v4.1.0 has a Cross Site Scripting (XSS) vulnerability in del function in \coreframe\app\member\admin\group.php.

First published (updated )

CVE-2025-25916

Wuzhicms WuzhicmsXSS

Risk 22

Severity

4.6

EPSS

0.04%

XSS

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter.

First published (updated )

CVE-2024-32206

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact