critical9.8
CVE-2018-14515
A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search…
Impact
A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search keywords parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzhi Cms Project | Wuzhi Cms | Version 4.1.0 |