critical9.8
CVE-2020-20413
SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle() function in admin/content.php.
Impact
SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle() function in admin/content.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzhicms | Wuzhicms | Version 4.1.0 |