CVE-2022-26301

Published March 24th, 2022

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

TuziCMS v2.0.6 was discovered to contain a SQL injection vulnerability via the component App\Manage\Controller\ZhuantiController.class.php.

yeyinshi/tuzicms

TuziCMS（兔子cms）是基于ThinkPHP3.2框架开发的企业网站管理系统，提供更方便、更安全的WEB应用开发体验，国内PHP+MYSQL 开源建站程序，它具有操作简单、功能强大、稳定性好、扩展性强，二次开发及后期维护方便，可以帮您快速构建起一个强大专业的企业网站。交流官方QQ群：383851010

GitHub