← Back

Wanliofficial

wanliofficial

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Lvzhou Cms
lvzhou_cms
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-65877
1Wanliofficial
1Lvzhou Cms
Dec 19, 2025
Dec 2, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerable to SQL injection via the 'title' parameter in com.wanli.lvzhoucms.service.ContentService#findPage. The parameter is concatenate...Show more
Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerable to SQL injection via the 'title' parameter in com.wanli.lvzhoucms.service.ContentService#findPage. The parameter is concatenated directly into a dynamic SQL query without sanitization or prepared statements, enabling attackers to read sensitive data from the database.Show less