CVE-2021-44349

creationtimestamp| type| source ---|---|--- 2021-12-03 22:38:09+00:00| seen| https://t.me/cibsecurity/33337...

CVE-2021-44349

CVE-2021-44349 affects TuziCMS v2.0.6. A SQL injection exists in the DownloadController (App\Manage\Controller\DownloadController.class.php) via the id parameter, due to inadequate input handling. The public references confirm the vulnerable component and parameter; no explicit remediation or pat...