CVE-2023-3528

CVE-2023-3528 affects ThinuTech ThinuCMS 1.5. The vulnerability is a SQL injection in the file /category.php triggered by manipulating the cat_id parameter. Exploitation could be remote. The issue is described as critical in several sources. A reported mitigation/workaround is to restrict access ...

CVE-2023-3542

ThinuTech ThinuCMS 1.5 is affected by a cross-site scripting vulnerability in the /contact.php handler. The issue arises from the manipulation of the name/body arguments, enabling XSS in certain unknown functionality. The vulnerability is remotely exploitable (attack vector: network) with user in...

CVE-2023-3541

CVE-2023-3541 affects ThinuTech ThinuCMS 1.5. The vulnerability is a Cross-Site Scripting (XSS) in the /author_posts.php file, triggered by manipulating the author parameter (example: g6g12o8sdm). Documents consistently describe remote feasibility and the specific vector, with /author_posts.php b...