Remote Code Execution Vulnerability in WUZHI CMS Version 4.1.0
CVE-2020-21325

8.8HIGH

Key Information:

Vendor

Wuzhicms

Status
Wuzhicms
Vendor
CVE Published:
20 June 2023

What is CVE-2020-21325?

A vulnerability exists within WUZHI CMS version 4.1.0 that enables remote attackers to execute arbitrary code through the set_chache method found in the function/common.func.php file. This weakness poses serious security risks, allowing unauthorized users to gain control over the affected system, potentially leading to data breaches or further exploits.

References

https://github.com/wuzhicms/wuzhicms/issues/188

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.