Wuzhicms vulnerabilities

Products

• Wuzhicms 57

Newest

• wuzhicms WuzhiCMS Setting index.php set code injection CVE-2025-3563 5.1 MediumApril 14, 2025
• wuzhicms wuzhicms v4.1.0 has a Cross Site Scripting (XSS) vulnerability in del function in \coreframe\app... CVE-2025-25916 5.4 MediumFebruary 28, 2025
• wuzhicms wuzhicms config.php test server-side request forgery CVE-2025-0480 5.3 MediumJanuary 15, 2025
• wuzhicms wuzhicms block.php edit code injection CVE-2024-10505 5.3 MediumOctober 30, 2024
• wuzhicms A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of... CVE-2024-32206 4.6 MediumApril 19, 2024
• wuzhicms An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code... CVE-2024-31008 6.5 MediumApril 3, 2024
• wuzhicms Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords... CVE-2023-52064 9.8 CriticalJanuary 10, 2024
• wuzhicms SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary... CVE-2023-46482 9.8 CriticalNovember 1, 2023
• wuzhicms An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary... CVE-2020-36037 8.8 HighAugust 11, 2023
• wuzhicms An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the... CVE-2020-21325 8.8 HighJune 20, 2023
• wuzhicms SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute... CVE-2020-20413 9.8 CriticalJune 20, 2023
• wuzhicms Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b... CVE-2023-31860 5.4 MediumMay 23, 2023
• wuzhicms wuzhicms v4.1.0 is vulnerable to Cross Site Scripting (XSS) in the Member Center, Account Settings. CVE-2023-30123 5.4 MediumApril 28, 2023
• wuzhicms A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app... CVE-2022-36168 2.7 LowAugust 25, 2022
• wuzhicms A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute... CVE-2020-19897 6.1 MediumJune 28, 2022
• wuzhicms SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute... CVE-2021-41654 9.8 CriticalJune 16, 2022
• wuzhicms Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter... CVE-2022-27431 9.8 CriticalMay 4, 2022
• wuzhicms A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0... CVE-2020-19770 5.4 MediumDecember 21, 2021
• wuzhicms Arbitrary file deletion vulnerability was discovered in wuzhicms v 4.0.1 via coreframe\app... CVE-2020-28145 7.5 HighOctober 12, 2021
• wuzhicms Wuzhi CMS v4.1.0 contains a remote code execution (RCE) vulnerability in \attachment\admin\index... CVE-2020-20124 8.8 HighSeptember 28, 2021
• wuzhicms Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe... CVE-2020-20122 9.8 CriticalSeptember 28, 2021
• wuzhicms Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management... CVE-2020-24930 8.1 HighSeptember 27, 2021
• wuzhicms Cross Site Scripting (XSS) vlnerability exists in WUZHI CMS up to and including 4.1.0 in the... CVE-2020-19553 5.4 MediumSeptember 21, 2021
• wuzhicms Blacklist bypass issue exists in WUZHI CMS up to and including 4.1.0 in common.func.php, which... CVE-2020-19551 8.8 HighSeptember 21, 2021
• wuzhicms Cross Site Scripting (XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in... CVE-2020-19915 6.1 MediumSeptember 20, 2021
• wuzhicms An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe... CVE-2021-40674 9.8 CriticalSeptember 20, 2021
• wuzhicms SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the ... CVE-2021-40670 9.8 CriticalSeptember 16, 2021
• wuzhicms SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the... CVE-2021-40669 9.8 CriticalSeptember 16, 2021
• wuzhicms SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the... CVE-2020-18877 7.5 HighAugust 20, 2021
• wuzhicms Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code... CVE-2020-18654 6.1 MediumJune 22, 2021
• wuzhicms Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers... CVE-2020-21590 4.3 MediumApril 2, 2021
• wuzhicms WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index... CVE-2018-17426 5.4 MediumMarch 7, 2019
• wuzhicms WUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description"... CVE-2018-17425 5.4 MediumMarch 7, 2019
• wuzhicms XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to... CVE-2019-9110 6.1 MediumFebruary 25, 2019
• wuzhicms XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe... CVE-2019-9109 6.1 MediumFebruary 25, 2019
• wuzhicms XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe... CVE-2019-9108 6.1 MediumFebruary 25, 2019
• wuzhicms XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to... CVE-2019-9107 6.1 MediumFebruary 25, 2019
• wuzhicms WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m... CVE-2018-20572 9.8 CriticalDecember 28, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via... CVE-2018-18938 4.8 MediumNovember 5, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the... CVE-2018-18712 8.8 HighOctober 27, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the... CVE-2018-18711 8.8 HighOctober 27, 2018
• wuzhicms wuzhi cms XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter. CVE-2018-17832 Public exploit 6.1 MediumOctober 1, 2018
• wuzhicms An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows... CVE-2018-14512 6.1 MediumJuly 23, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin... CVE-2018-14472 7.2 HighJuly 20, 2018
• wuzhicms WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UC_KEY' is... CVE-2018-11722 9.8 CriticalJune 5, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in "Account... CVE-2018-11549 5.4 MediumMay 29, 2018
• wuzhicms WUZHI CMS 4.1.0 has SQL Injection via an api/sms_check.php?param= URI. CVE-2018-11528 9.8 CriticalMay 29, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add a... CVE-2018-11493 8.8 HighMay 26, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0. There is XSS via the email parameter to the index.php... CVE-2018-10391 4.8 MediumApril 26, 2018
• wuzhicms An issue was discovered in WUZHI CMS 4.1.0. The "Extension Module -> System Announcement" feature... CVE-2018-10368 4.8 MediumApril 25, 2018
• Show olderLoading…