CNNVD-202511-3068 Information
Nov 30, 2025
cve
CNNVD ID
CNNVD-202511-3068
Related CVE
- CNNVD Published: 2025-11-30
Description (Chinese)
wtcms是Taosir个人开发者的一套基于ThinkPHP的内容管理系统（CMS）。 wtcms存在SQL注入漏洞，该漏洞源于对文件application/Comment/Controller/CommentadminController.class.php中参数ids的错误操作，可能导致SQL注入。
Description (English)
wtcms is a ThinkPHP-based content management system (CMS) for Taosir personal developers. Wtcms has a leak in SQL, which results from an error in the parameter ids in file application/Comment/Controller/CommentadminController.class.php, which may result in SQL injection.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
个人开发者
Published
2025-11-30
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.333787 https://www.yuque.com/shangu-vvuup/ydpg69/dd5zpygt7w5w4d19?singleDoc https://vuldb.com/?id.333787 https://vuldb.com/?submit.688838 https://vuldb.com/?submit.688839 https://access.redhat.com/security/cve/cve-2025-13783
Share on: