WuzhiCMS versions up to 4.1.0 contain a SQL injection vulnerability in the article::getDataOfJson function, allowing remote attackers to execute arbitrary SQL commands via the title or master_table parameters.
WuzhiCMS
sql-injection
vulnerability
web-application
ssrf
web-vulnerability
2r
1t
1c
updated