CVE-2024-0480 Taokeyun HTTP POST Request Drs.php index sql injection

A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file application/index/controller/m/Drs.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The...

CVE-2024-0480

Taokeyun up to v1.0.5 suffers SQL injection in the HTTP POST Request Handler, specifically in the index function of application/index/controller/m/Drs.php via the cid parameter. The vulnerability is remotely exploitable; exploitation details are documented in public writeups (e.g., PoC/traffic pa...