Yejiao

Tuzicms

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-26301

Exploit
  • EPSS 0.25%
  • Published 24.03.2022 22:15:09
  • Last modified 21.11.2024 06:53:43

TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php.

9.8

CVE-2021-44349

  • EPSS 0.26%
  • Published 03.12.2021 20:15:08
  • Last modified 21.11.2024 06:30:45

SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php.

9.8

CVE-2021-44348

  • EPSS 0.26%
  • Published 03.12.2021 20:15:07
  • Last modified 21.11.2024 06:30:45

SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php.

9.8

CVE-2021-44347

Exploit
  • EPSS 0.25%
  • Published 03.12.2021 19:15:07
  • Last modified 21.11.2024 06:30:45

SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\Manage\Controller\GuestbookController.class.php.

9.8

CVE-2019-16642

Exploit
  • EPSS 0.26%
  • Published 20.09.2019 15:15:14
  • Last modified 21.11.2024 04:30:52

App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.