cve/CVE-2018-11722.md at 7482ec4521a75dd13882dc1283f17009c936e974 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00

0xMarcio ba290685fe Update CVE sources 2024-06-09 00:33

2024-06-09 00:33:16 +00:00

628 B

Raw Blame History

CVE-2018-11722

Description

WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UC_KEY' is hard coded.

POC

Reference

Github

No PoCs found on GitHub currently.