Products: 2
Vulnerabilities: 64
Known Exploited: 0
12
Critical Level Threats
17
High Level Threats
34
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-88419
An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server, because the stored file extension is taken verbatim from the client-supplied filename with no extension allowlist or content validation and the file is written to the web-accessible uploadfile/ directory, from which the web server executes PHP.
Last Modified: Sep 26, 2026
Published: Sep 22, 2026
CVE-2026-94102
WuzhiCMS Login index.php redirect
Last Modified: Sep 24, 2026
Published: Sep 21, 2026
CVE-2026-92380
WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery
Last Modified: Sep 16, 2026
Published: Sep 16, 2026
CVE-2026-91849
WuzhiCMS Avatar Upload index.php setAvatar unrestricted upload
Last Modified: Sep 17, 2026
Published: Sep 15, 2026
CVE-2026-91848
WuzhiCMS index.php getDataOfJson sql injection
Last Modified: Sep 15, 2026
Published: Sep 15, 2026
Items Per Page
