Approved changes feed: RSS · Atom
cpe:2.3:a:wuzhi_cms_project:wuzhi_cms:4.1.0:*:*:*:*:*:*:*part: a version: 4.1.0 update: *
| Vendor | Wuzhi Cms Project (10757e0f-2aa7-59f2-b401-38afb13b33ac) |
|---|---|
| Product | Wuzhi Cms (7219dece-34f0-53f5-a98e-31e02ec5ece9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/wuzhicms/wuzhicms |
purl2cpe | 2026-06-01 10:16:47.276796 |
pkg:github/wuzhicms/wuzhicms |
purl2cpe | 2026-06-01 10:16:47.276798 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-18939 |
vulnerable | 2026-06-08 05:11:14.980183 |
Details available
An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field.
Published: 2018-11-05T08:00:00.000Z
Updated: 2024-08-05T11:23:08.870Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17852 |
vulnerable | 2026-06-08 05:11:06.762516 |
Details available
A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=card&v=detail_listing URI.
Published: 2018-10-01T08:00:00.000Z
Updated: 2024-08-05T10:54:10.892Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16350 |
vulnerable | 2026-06-08 05:11:04.739541 |
Details available
WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter.
Published: 2018-09-02T18:00:00.000Z
Updated: 2024-08-05T10:24:31.588Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16349 |
vulnerable | 2026-06-08 05:11:04.739163 |
Details available
WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter.
Published: 2018-09-02T18:00:00.000Z
Updated: 2024-08-05T10:24:31.580Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15894 |
vulnerable | 2026-06-08 05:11:03.742398 |
Details available
A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter.
Published: 2018-08-27T04:00:00.000Z
Updated: 2024-08-05T10:10:05.540Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15893 |
vulnerable | 2026-06-08 05:11:03.742001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14515 |
vulnerable | 2026-06-08 05:10:53.008419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14513 |
vulnerable | 2026-06-08 05:10:53.006786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.