CVE Intelligence

Wanliofficial Lvzhou Cms vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Wanliofficial Lvzhou Cms: 1 record(s), with affected versions and fixes.
cpe:2.3:a:wanliofficial:lvzhou_cms

CVE-2025-65877 High · 7.5 CWE-89 Dec 2, 2025
SQL Injection in Wanliofficial Lvzhou Cms
Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017ed615 (2025-09-22) is vulnerable to SQL injection via the 'title' parameter in com.wanli.lvzhoucms.service.ContentService#findPage. The parameter is concatenated directly into a dynamic SQL query without sanitization or prepared statements, enabling attackers to read sensitive data from the database.