Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-08025
HistoryJan 23, 2022 - 12:00 a.m.

Taocms SQL Injection Vulnerability

2022-01-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
taocms
sql injection
vulnerability
china
content management system
filtering
escaping
taocmsincludemodelarticle.php
illegal commands
sensitive data
cnvd

EPSS

0.002

Percentile

59.3%

Taocms is a micro Cms (content management system) in China. taocms has a SQL injection vulnerability in v3.0.2, which stems from the lack of effective filtering and escaping of SQL statements in taocmsincludeModelArticle.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

59.3%

Related for CNVD-2022-08025