critical9.8
CVE-2021-40670
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file.
Impact
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords iparameter under the /coreframe/app/order/admin/card.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzhicms | Wuzhicms | Version 4.1.0 |