| शीर्षक | Wuzhicms v4.1.0 hava a SQL Injection Vulnerability |
|---|
| विवरण | A vulnerability classified as critical has been found in wuzhicms4.1.0. This affects unknown parts of the file /coreframe/app/member/admin/group.php. The operation on the parameter groupid leads to sql injection.The vulnerability is located in the management member -> member group management list -> delete operation.In the group.php file, the $groupid parameter under the del method are controllable, and the $groupid parameter is not strictly filtered, causing SQL injection vulnerabilities! |
|---|
| स्रोत | ⚠️ https://github.com/Upgradeextension/wuzhicms4.1.0/blob/main/README.md |
|---|
| उपयोगकर्ता | komorebi (UID 40027) |
|---|
| सबमिशन | 02/02/2023 03:02 AM (4 साल पहले) |
|---|
| संयम | 02/02/2023 08:39 PM (18 hours later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 198980 [Wuzhicms 4.1.0 group.php groupid SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|