24 matches found
Sql injection
A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument catid leads to sql injection. The attack may be launched remotely. The identifier of this...
CVE-2023-3528 ThinuTech ThinuCMS category.php sql injection
A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument catid leads to sql injection. The attack may be launched remotely. The identifier of this...
CVE-2023-3528
CVE-2023-3528 affects ThinuTech ThinuCMS 1.5. The vulnerability is a SQL injection in the file /category.php triggered by manipulating the cat_id parameter. Exploitation could be remote. The issue is described as critical in several sources. A reported mitigation/workaround is to restrict access ...
PT-2023-25200 · Thinutech · Thinucms
Name of the Vulnerable Software and Affected Versions: ThinuTech ThinuCMS version 1.5 Description: A critical issue affects some unknown functionality of the file /category.php. The manipulation of the cat id argument leads to sql injection. The attack may be launched remotely. Recommendations: F...