Sql injection

App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring...

CVE-2019-16642

CVE-2019-16642 affects TuziCMS 2.0.6. Affected component: App\Mobile\Controller\ZhuantiController.class.php, vulnerable to SQL injection via the index.php/Mobile/Zhuanti/group?id= parameter. Root cause described as unsafe handling of user input in ZhuantiController; impact includes data exposure ...

PT-2019-14732

Name of the Vulnerable Software and Affected Versions TuziCMS version 2.0.6 Description The issue concerns SQL injection in TuziCMS. Specifically, it affects the index.php/Mobile/Zhuanti/group?id= endpoint, where the id parameter is vulnerable to SQL injection attacks. This could potentially allo...

CVE-2019-16642: Improper Neutralization of Special Elements used in an SQL Command

App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring...