PT-2023-17121 · Teacms · Teacms

Name of the Vulnerable Software and Affected Versions: TeaCMS versions up to 2.0.2 Description: A problematic issue was found in TeaCMS, affecting an unknown function of the Article Title Handler component. This issue allows for cross site scripting when an attacker manipulates the input with...

CVE-2023-1616: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

XiaoBingBy TeaCMS 跨站脚本漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. A security vulnerability exists in XiaoBingBy TeaCMS version 2.0.2 and earlier versions. The vulnerability can be exploited by attackers to conduct cross-site scripting attacks...

CVE-2023-1483

A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the...

Sql injection

A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the...

CVE-2023-1483 XiaoBingBy TeaCMS getallarticleinfo sql injection

A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the...

CVE-2023-1483

XiaoBingBy TeaCMS

XiaoBingBy TeaCMS SQL注入漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. XiaoBingBy TeaCMS 2.0.2 and previous versions have a SQL injection vulnerability, the vulnerability stems from a problem with the code in the file /admin/getallarticleinfo, where the operation of the parameter searchInfo can lea...

CVE-2023-1483: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the...

CVE-2023-1398

A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the publi...

Path traversal

A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the publi...

CVE-2023-1398

CVE-2023-1398 affects XiaoBingBy TeaCMS 2.0. The vulnerability is a path traversal in the unknown functionality of the file egress point /admin/upload, exploitable remotely via traversal sequence '../filedir'. The vulnerability has been publicly disclosed (VDB-222985) and is referenced across mul...

CVE-2023-1398 XiaoBingBy TeaCMS upload path traversal

A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the publi...

CVE-2023-1398: Path Traversal: '../filedir'

A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the publi...

PT-2023-16955 · Unknown · Xiaobingby Teacms

Name of the Vulnerable Software and Affected Versions: XiaoBingBy TeaCMS version 2.0 Description: A critical vulnerability was found in XiaoBingBy TeaCMS, affecting an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launch...

XiaoBingBy TeaCMS 路径遍历漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. A security vulnerability exists in XiaoBingBy TeaCMS version 2.0, which stems from a problem with the file /admin/upload, which can lead to a path traversal vulnerability...

TeaCMS suffers from SQL injection vulnerability (CNVD-2021-51349)

TeaCMS is a blog system developed by Spring-SpringMVC-MyBatis-MySQL database . TeaCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in TeaCMS

TeaCMS is a blog system developed by Spring-SpringMVC-MyBatis-MySQL database . TeaCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...