3 matches found
CVE-2022-46999
Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php...
CVE-2022-46999
Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \App\Manage\Controller\UserController.class.php...
CVE-2022-46999
Tuzicms v2.0.6 contains a SQL injection vulnerability in the App\Manage\Controller\UserController.class.php, caused by unsafe SQL handling in UserController.class.php. CVSS 3.1 base score 9.8 (CRITICAL) with high impact to confidentiality, integrity, and availability. Remediation: upgrade to a ne...