Skip to content
OpenAdvisories
Unscored CVE-2021-41654 EUVD-2021-28666GHSA-63w8-jhm5-x9vp

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter…

Published Jun 16, 2022 · Updated Aug 4, 2024 · Assigned by mitre

Description

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php

References