cve/CVE-2024-48238.md at main - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00

0xMarcio cb00e1339f Update CVE list 2025-09-29 21:09

2025-09-29 21:09:30 +02:00

694 B

Raw Permalink Blame History

CVE-2024-48238

Description

WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.

POC

Reference

https://github.com/taosir/wtcms/issues/14

Github

No PoCs found on GitHub currently.