Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-95217
HistoryDec 07, 2021 - 12:00 a.m.

TuziCMS SQL Injection Vulnerability (CNVD-2021-95217)

2021-12-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
tuzicms
sql injection
v2.0.6
mysql
php
cnvd-2021-95217
appmanagecontrolleradvertcontroller.class.php
database vulnerability

EPSS

0.001

Percentile

50.0%

TuziCMS (Rabbit CMS) is a PHP and MySQL based enterprise website content management system. SQL injection vulnerability exists in TuziCMS version v2.0.6, which originates from the id parameter in AppManageControllerAdvertController.class.php, and can be exploited by attackers to vulnerability can be exploited to obtain sensitive database information.

EPSS

0.001

Percentile

50.0%

Related for CNVD-2021-95217