Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas3034▼ 62 respecto a la semana anterior
Críticas / altas1427▲ 61 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
9 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4.8) | 0.67% | — | Wuzhi CMS Project Wuzhi CMS | 5/11/2018 | 17/6/2026 | An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field. | |
| Modificada | Crítica (9.8) | 1.5% | — | Wuzhi CMS Project Wuzhi CMS | 1/10/2018 | 17/6/2026 | A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=card&v=detail_listing URI. | |
| Modificada | Media (6.1) | 2.3% | — | Wuzhicms Wuzhi CMS | 1/10/2018 | 17/6/2026 | XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter. | |
| Modificada | Media (6.1) | 0.86% | — | Wuzhi CMS Project Wuzhi CMS | 2/9/2018 | 17/6/2026 | WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter. | |
| Modificada | Media (6.1) | 0.86% | — | Wuzhi CMS Project Wuzhi CMS | 2/9/2018 | 17/6/2026 | WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter. | |
| Modificada | Crítica (9.8) | 1.5% | — | Wuzhi CMS Project Wuzhi CMS | 27/8/2018 | 17/6/2026 | A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter. | |
| Modificada | Crítica (9.8) | 1.5% | — | Wuzhi CMS Project Wuzhi CMS | 27/8/2018 | 17/6/2026 | A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=core&f=copyfrom&v=listing keywords parameter. | |
| Modificada | Crítica (9.8) | 2.0% | — | Wuzhi CMS Project Wuzhi CMS | 23/7/2018 | 17/6/2026 | A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search keywords parameter. | |
| Modificada | Media (6.1) | 1.1% | — | Wuzhi CMS Project Wuzhi CMS | 23/7/2018 | 17/6/2026 | An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[content] parameter to the index.php?m=feedback&f=index&v=contact URI. |