CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2022/03/24 12:00 a.m.•4 views

CVE-2022-26301: Improper Neutralization of Special Elements used in an SQL Command

TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php...

9.8CVSS8.1AI score0.0108EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2019/09/20 12:00 a.m.•1 views

CVE-2019-16642: Improper Neutralization of Special Elements used in an SQL Command

App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring...

9.8CVSS8.2AI score0.01707EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2019/09/20 12:00 a.m.•4 views

CVE-2019-16644: Improper Neutralization of Special Elements used in an SQL Command

App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring...

9.8CVSS8.2AI score0.01366EPSS

SaveExploits1References2

Rows per page

Family

Bulletin Type

Min CVSS Score

Date

Order by