Lucene search
China National Vulnerability DatabaseCNVD-2022-31825HistoryMar 03, 2022 - 12:00 a.m.
Taocms SQL Injection Vulnerability (CNVD-2022-31825)
2022-03-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
0.001 Low
EPSS
Percentile
51.1%
Taocms is a micro Cms (content management system) in China. version 3.0.2 of Taocms is vulnerable to SQL injection, which stems from the lack of validation of externally entered SQL statements in the Comment Update field. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| taocms taocms | eq | 3.0.2 |
Related
nvd
nvd
CVE-2022-23387
2022-03-01 17:15:08
cve
cve
CVE-2022-23387
2022-03-01 17:15:08
cvelist
cvelist
CVE-2022-23387
2022-03-01 16:42:36
prion
prion
Design/Logic Flaw
2022-03-01 17:15:00
osv
osv
CVE-2022-23387
2022-03-01 17:15:08