CNNVD-202511-3071 Information
Nov 30, 2025
cve
CNNVD ID
CNNVD-202511-3071
Related CVE
- CNNVD Published: 2025-11-30
Description (Chinese)
wtcms是Taosir个人开发者的一套基于ThinkPHP的内容管理系统（CMS）。 wtcms存在SQL注入漏洞，该漏洞源于对文件application/Admin/Controller/SlideController.class.php中参数ids的错误操作，可能导致SQL注入。
Description (English)
wtcms is a ThinkPHP-based content management system (CMS) for Taosir personal developers. Wtcms has a leak in SQL, which stems from an error in the application/Admin/Controller/SlideController.class.php parameter ids, which may result in SQL injection.
Hazard Level
Medium
Vulnerability Type
SQL注入
Affected Vendor
个人开发者
Published
2025-11-30
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.333786 https://www.yuque.com/shangu-vvuup/ydpg69/amhlbdhkw0pgt44g?singleDoc https://vuldb.com/?submit.688837 https://vuldb.com/?id.333786 https://access.redhat.com/security/cve/cve-2025-13782
Share on: