POC详情： e02548ab15e3f53fd12f81dcd81285bed4294556

描述

Wuzhicms 4.1.0 contains a SQL injection vulnerability via the grouppid parameter of /coreframe/app/member/admin/group.php. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

文件快照

 id: CNVD-2022-36985

info:
  name: Wuzhicms 4.1.0 - SQL Injection
  author: princechaddha
  severity

...

备注