Description
SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'.
Unscored
CVE-2020-18877
EUVD-2020-10790GHSA-c9r3-gv8p-rgw3
SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coref…
Published Aug 20, 2021 · Updated Aug 4, 2024 · Assigned by mitre