PT-2021-24083

Name of the Vulnerable Software and Affected Versions: TuziCMS version 2.0.6 Description: A SQL Injection issue exists via the id parameter in the DownloadController.class.php file. This allows for potential exploitation. Recommendations: For TuziCMS version 2.0.6, consider restricting access to...

CVE-2021-44349: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php...