WuzhiCMS Code Injection Vulnerability in Setting Handler

A critical code injection vulnerability has been identified in WuzhiCMS version 4.1. The issue arises in the Setting Handler component, specifically within the Set function of the index.php file, when the setting parameter is manipulated. This vulnerability allows remote attackers to inject malicious code, which could be executed on the server. The flaw was disclosed publicly, and the vendor did not respond to initial contact regarding the issue.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server, with the injected code executed in the context of the web server.

Reproduction

To reproduce this vulnerability, send a GET request to the index.php file with the attachment module activated. Include the setting parameter in the request, embedding PHP code such as a command to execute phpinfo(). The injected code will be executed on the server, demonstrating the code execution vulnerability.