2018-06-05 12:00:00
mitre
PUBLISHED
WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the code parameter, because UC_KEY is hard coded.