120 matches found
CVE-2023-0243 TuziCMS Article Module ArticleController.class.php index sql injection
A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArticleController.class.php of the component Article Module. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...
CVE-2023-0243 TuziCMS Article Module ArticleController.class.php index sql injection
A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArticleController.class.php of the component Article Module. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...
CVE-2023-0243
The CVE-2023-0243 entry concerns TuziCMS 2.0.6. Affected: Article Module, ArticleController.class.php, in the index function. Root cause: manipulation of the id argument enables SQL injection. Impact: remote attacker could exploit; public exploit disclosed. Multiple sources corroborate a SQL inje...
PT-2023-16107 · Tuzicms · Tuzicms
Name of the Vulnerable Software and Affected Versions: TuziCMS version 2.0.6 Description: A critical vulnerability was found in TuziCMS, affecting the delall function of the file AppManageControllerKefuController.class.php. The manipulation of the id argument leads to SQL injection. The attack ca...
TuziCMS SQL Injection Vulnerability (CNVD-2022-25982)
TuziCMS Rabbit CMS is a PHP and MySQL-based enterprise content management system CMS. SQL injection vulnerability exists in TuziCMS version 2.0.6, which stems from the fact that AppManageControllerBannerController.class.php lacks validation for external input SQL statements. An attacker could use...
CVE-2022-23882
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...
CVE-2022-23882
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...
CVE-2022-23882
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...
Sql injection
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...
CVE-2022-23882
TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...
CVE-2022-23882
CVE-2022-23882 affects TuziCMS 2.0.6. The vulnerability is a SQL injection in the file App\Manage\Controller\BannerController.class.php caused by insufficient validation of external SQL inputs, enabling an attacker to execute arbitrary SQL and potentially access sensitive data. Multiple vendor/ n...
TuziCMS SQL注入漏洞
TuziCMS Rabbit CMS is a PHP and MySQL-based enterprise content management system CMS. SQL injection vulnerability exists in TuziCMS version 2.0.6, which stems from the fact that AppManageControllerBannerController.class.php lacks validation for external input SQL statements. An attacker could use...
CVE-2022-26301
TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php...
Sql injection
TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php...
CVE-2022-26301
TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php...
CVE-2022-26301
TuziCMS v2.0.6 is affected by a SQL injection vulnerability in the App\Manage\Controller\ZhuantiController.class.php component. The initial CVE-2022-26301 entry documents the issue and CVSS metrics (CVSS v3.1 base score 9.8, CRITICAL; CVSS v2 base score 7.5, HIGH), indicating network access with ...
TuziCMS has an unspecified vulnerability
TuziCMS rabbit CMS is a PHP and MySQL based content management system CMS for enterprises. a security vulnerability exists in TuziCMS version v2.0.6, which stems from the id parameter in AppManageControllerDownloadController.class.php. No detailed vulnerability details are available at this time...
TuziCMS SQL Injection Vulnerability (CNVD-2021-95216)
TuziCMS Rabbit CMS is a PHP and MySQL-based enterprise content management system. 2.0.6 version of TuziCMS is vulnerable to SQL injection, which can be exploited by attackers via "AppManageControllerGuestbookController.class.php". Vulnerability attack...
TuziCMS SQL Injection Vulnerability (CNVD-2021-95217)
TuziCMS Rabbit CMS is a PHP and MySQL based enterprise website content management system. SQL injection vulnerability exists in TuziCMS version v2.0.6, which originates from the id parameter in AppManageControllerAdvertController.class.php, and can be exploited by attackers to vulnerability can b...