Wuzhicms

Wuzhicms

57 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2020-21590

Exploit
  • EPSS 0.13%
  • Published 02.04.2021 20:15:12
  • Last modified 21.11.2024 05:12:42

Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter.

5.4

CVE-2018-17426

Exploit
  • EPSS 0.21%
  • Published 07.03.2019 23:29:01
  • Last modified 05.05.2025 18:10:51

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI.

5.4

CVE-2018-17425

Exploit
  • EPSS 0.21%
  • Published 07.03.2019 23:29:01
  • Last modified 05.05.2025 18:10:51

WUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description" field under the index.php?m=member URI.

6.1

CVE-2019-9110

Exploit
  • EPSS 0.22%
  • Published 25.02.2019 01:29:00
  • Last modified 05.05.2025 18:10:51

XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&set_iframe=[XSS] to coreframe/app/content/postinfo.php.

6.1

CVE-2019-9109

Exploit
  • EPSS 0.22%
  • Published 25.02.2019 01:29:00
  • Last modified 05.05.2025 18:10:51

XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.

6.1

CVE-2019-9108

Exploit
  • EPSS 0.22%
  • Published 25.02.2019 01:29:00
  • Last modified 21.11.2024 04:50:59

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.

6.1

CVE-2019-9107

Exploit
  • EPSS 0.22%
  • Published 25.02.2019 01:29:00
  • Last modified 05.05.2025 18:10:51

XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=imagecut&v=init&imgurl=[XSS] to coreframe/app/attachment/imagecut.php.

9.8

CVE-2018-20572

Exploit
  • EPSS 0.26%
  • Published 28.12.2018 16:29:05
  • Last modified 21.11.2024 04:01:45

WUZHI CMS 4.1.0 allows coreframe/app/coupon/admin/copyfrom.php SQL injection via the index.php?m=promote&f=index&v=search keywords parameter, a related issue to CVE-2018-15893.

4.8

CVE-2018-18938

Exploit
  • EPSS 0.24%
  • Published 05.11.2018 09:29:00
  • Last modified 05.05.2025 18:10:51

An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via an ontoggle attribute to details/open/ within a second input field.

8.8

CVE-2018-18712

Exploit
  • EPSS 0.14%
  • Published 29.10.2018 12:29:06
  • Last modified 05.05.2025 18:10:51

An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can change the super administrator's username via index.php?m=member&f=index&v=edit&uid=1.