Vulnerability Component - WukongCRM - Knownsec Seebug Vulnerability Platform

Vulnerability Component — WukongCRM

SSV ID	Submit Time	Name	Popularity \| Comments
SSV-91955	2016-06-27	悟空CRM App\Lib\Action\BusinessAction.class.php SQL注入	6734 \| 9
SSV-91901	2016-06-20	悟空CRM /App/Lib/Action/UserAction.class.php user_id参数 SQL注入	5489 \| 0
SSV-91459	2016-05-05	悟空CRM V0.5.4 /App/Lib/Action/ProductAction.class.php SQL盲注	3375 \| 0
SSV-91458	2016-05-05	悟空CRM V0.5.4 /App/Lib/Action/FinanceAction.class.php SQL盲注	3318 \| 0
SSV-91457	2016-05-05	悟空CRM V0.5.4 /App/Lib/Action/LeadsAction.class.php SQL盲注	3080 \| 0
SSV-91456	2016-05-05	悟空CRM系统 /Public/js/php/file_manager_json.php 越权访问漏洞	4210 \| 0
SSV-91363	2016-04-23	悟空CRM V0.5.4 /App/Lib/Action/CustomerAction.class.php SQL盲注	2921 \| 0
SSV-95905	2016-04-08	悟空CRM无需任何权限的SQL注入漏洞2（ThinkPHP特性）	2088 \| 0
SSV-95904	2016-04-06	悟空CRM从无任何权限到Getshell漏洞分析	4493 \| 0
SSV-95903	2015-11-21	悟空crm数据权限控制不当以致绕过访问	2056 \| 0
SSV-89556	2015-09-28	SunshineCRM v1 /general/ERP/LOGIN/logincheck.php SQL注入漏洞	2154 \| 0
SSV-89428	2015-09-15	WukongCRM 0.5.1 /App/Lib/Action/WeixinAction.class.php XXE漏洞	1941 \| 3