Taocms SQL Injection Vulnerability

Taocms is a micro Cms Content Management System in China. Taocms in v3.0.2 version exists SQL injection vulnerability, the vulnerability stems from taocmsincludeModelArticle.php for SQL statements lack of effective filtering and escaping. An attacker can exploit this vulnerability to execute...

PT-2022-12609

Name of the Vulnerable Software and Affected Versions Taocms version 3.0.2 Description The issue concerns an arbitrary file read vulnerability that can be exploited via the path parameter. Additionally, there is a SQL injection vulnerability via the taocmsincludeModelArticle.php file...