CVE-2018-14472

An issue was discovered in WUZHI CMS 4.1.0

published July 20, 2018

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

An issue was discovered in WUZHI CMS 4.1.0. The vulnerable file is coreframe/app/order/admin/goods.php. The $keywords parameter is taken directly into execution without any filtering, leading to SQL injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01795 · 78.3th percentile
Published
2018-07-20T16:00Z
EPSS history
Timeline
  • 20 JUL 16:00Z
    An issue was discovered in WUZHI CMS 4.1.0
    cvelistv5