SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'.
References
Link | Resource |
---|---|
https://github.com/wuzhicms/wuzhicms/issues/175 | Exploit Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-08-20T13:20:04
Updated: 2021-08-20T13:20:04
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-18877
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-08-20T14:15:08.677
Modified: 2021-08-23T19:07:28.460
Link: CVE-2020-18877
JSON object: View
Redhat Information
No data.
CWE