Medium · 6.5 CVE-2024-31008 EUVD-2024-28926GHSA-wjf7-jjrj-rw8w

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the in…

Published Apr 3, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file.

References

https://github.com/majic-banana/vulnerability/blob/main/POC/WUZHICMS4.1.0-Captcha%20bypass%20%28logic%20vulnerability%29.md