Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:54 a.m.4 views

CVE-2023-0244

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.5AI score0.00297EPSS
Exploits1References1
OSV
OSV
added 2023/01/12 3:15 p.m.1 views

CVE-2023-0244

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS6.5AI score0.00297EPSS
Exploits1References3
Prion
Prion
added 2023/01/12 3:15 p.m.15 views

Sql injection

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS9.7AI score0.00297EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2023/01/12 2:49 p.m.88 views

CVE-2023-0244

CVE-2023-0244 affects TuziCMS 2.0.6, exploiting the delall function in App\Manage\Controller\KefuController.class.php by manipulating the id parameter to trigger SQL injection. The issue enables remote exploitation and the vulnerability exploit has been disclosed publicly (VDB-218152). In practic...

9.8CVSS8.3AI score0.00297EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/01/12 2:49 p.m.14 views

CVE-2023-0244 TuziCMS KefuController.class.php delall sql injection

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS10AI score0.00297EPSS
Exploits1References3
Rows per page
Query Builder