CVE-2021-41654

Published: 2022-06-16T12:15Z

Last Modified: 2024-11-21T06:26Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php > MITRE Terms of Use apply – see LICENSE‑MITRE.txt