Taocms SQL Injection Vulnerability (CNVD-2022-33838)

Taocms is a micro Cms content management system in China. a SQL injection vulnerability exists in Taocms v3.0.2, which stems from the lack of validation of external input SQL statements in the id parameter in includeModelCategory.php, and can be exploited by attackers to execute illegal SQL...

PT-2022-17335

Name of the Vulnerable Software and Affected Versions Taocms version 3.0.2 Description A SQL injection issue was found in Taocms via the id parameter in the includeModelCategory.php file. Recommendations For Taocms version 3.0.2, consider restricting access to the vulnerable id parameter in the...