daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update wuzhicms-sqli.yaml

patch-1
Ritik Chaddha 2022-11-17 17:08:30 +05:30 committed by GitHub
parent a5af14982f
commit b3500789fe
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
vulnerabilities/other/wuzhicms-sqli.yaml
View File

@ -4,7 +4,8 @@ info:
name: Wuzhicms 4.1.0 - SQL Injection
author: princechaddha
severity: critical
description: Wuzhicms 4.1.0 contains a SQL injection vulnerability via the grouppid parameter of /coreframe/app/member/admin/group.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.
description: |
Wuzhicms 4.1.0 contains a SQL injection vulnerability via the grouppid parameter of /coreframe/app/member/admin/group.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.
reference:
- https://github.com/wuzhicms/wuzhicms/issues/184
- https://vulners.com/cnvd/CNVD-2022-36985
@ -12,6 +13,10 @@ info:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
cvss-score: 10.0
cwe-id: CWE-89
metadata:
verified: true
shodan-query: http.html:"Wuzhicms"
fofa-query: title="Wuzhicms"
tags: wuzhicms,sqli
variables: