Code injection

2019-09-2118:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

37.5%

TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.

CPENameOperatorVersion
tuzicmseq2.0.6

CPE	Name	Operator	Version
	tuzicms	eq	2.0.6

References

github.com/yeyinshi/tuzicms/issues/5

0.001 Low

EPSS

Percentile

37.5%

Related for PRION:CVE-2019-16657