Description
An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords parameter is taken directly into execution without any filtering, leading to SQL injection.
Unscored
CVE-2018-14472
EUVD-2018-6389GHSA-jh3w-6v54-jq6h
An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords parameter is taken di…
Published Jul 20, 2018 · Updated Sep 17, 2024 · Assigned by mitre