CVE-2022-23387

An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field...

CVE-2022-23387

Taocms 3.0.2 contains a SQL injection vulnerability (CVE-2022-23387) that allows an attacker to obtain data via the Comment Update field. Multiple connected sources (Red Hat CVE entry, CNVD/CNNVD, OSV, NVD) corroborate a SQL blind injection with data disclosure, without evidence of exploitation v...

CVE-2022-23387

An issue was discovered in taocms 3.0.2. This is a SQL blind injection that can obtain database data through the Comment Update field...