2021-08-20 13:20:04
mitre
PUBLISHED
SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the flag parameter in the component /coreframe/app/order/admin/index.php.