CVE-2025-13783

A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file application/Comment/Controller/CommentadminController.class.php of the component CommentadminController. The manipulation of the argument...

CVE-2018-19894

ThinkCMF X2.2.2 has SQL Injection via the functions check and delete in CommentadminController.class.php and is exploitable with the manager privilege via the ids parameter in a commentadmin action...

PT-2018-15146

Name of the Vulnerable Software and Affected Versions ThinkCMF version X2.2.2 Description The issue concerns a SQL Injection problem. It is exploitable through the ids parameter in a "commentadmin" action, specifically via the check and delete functions in CommentadminController.class.php, and...

CVE-2018-19894: Improper Neutralization of Special Elements used in an SQL Command

ThinkCMF X2.2.2 has SQL Injection via the functions check and delete in CommentadminController.class.php and is exploitable with the manager privilege via the ids parameter in a commentadmin action...