TuziCMS SQL Injection Vulnerability (CNVD-2022-25982)

TuziCMS Rabbit CMS is a PHP and MySQL-based enterprise content management system CMS. SQL injection vulnerability exists in TuziCMS version 2.0.6, which stems from the fact that AppManageControllerBannerController.class.php lacks validation for external input SQL statements. An attacker could use...

CVE-2022-23882

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

CVE-2022-23882

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

Sql injection

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

CVE-2022-23882

TuziCMS 2.0.6 is affected by SQL injection in \App\Manage\Controller\BannerController.class.php...

CVE-2022-23882

CVE-2022-23882 affects TuziCMS 2.0.6. The vulnerability is a SQL injection in the file App\Manage\Controller\BannerController.class.php caused by insufficient validation of external SQL inputs, enabling an attacker to execute arbitrary SQL and potentially access sensitive data. Multiple vendor/ n...