Arbitrary Code Execution and Sensitive Information Theft via Index.php File
CVE-2024-31008

Currently unrated

Key Information:

Vendor: WUZHICMS
Status: Wuzhicms
Vendor: CVE Published:; 3 April 2024

What is CVE-2024-31008?

An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file.

References

https://github.com/majic-banana/vulnerability/blob/main/P...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 3, 2024