Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-18531
HistoryMar 03, 2022 - 12:00 a.m.

Taocms id parameter SQL injection vulnerability

2022-03-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
12

0.001 Low

EPSS

Percentile

37.9%

Taocms is a micro Cms (content management system) in China. version 3.0.2 of Taocms is vulnerable to SQL injection, which stems from the lack of validation of externally entered SQL statements by the backend parameter id. An attacker can use this vulnerability to execute illegal SQL commands to steal sensitive database data.

CPENameOperatorVersion
taocms taocmseq3.0.2

0.001 Low

EPSS

Percentile

37.9%

Related for CNVD-2022-18531