CVE-2023-0243

Published
View on NVD ↗
CVSS v3
6.3
MEDIUM
CVSS v2
6.5
MEDIUM
Affected
1
PROJECT

Description

A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArticleController.class.php of the component Article Module. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-218151.

TuziCMS(兔子cms)是基于ThinkPHP3.2框架开发的企业网站管理系统,提供更方便、更安全的WEB应用开发体验,国内PHP+MYSQL 开源建站程序,它具有操作简单、功能强大、稳定性好、扩展性强,二次开发及后期维护方便,可以帮您快速构建起一个强大专业的企业网站。交流官方QQ群:383851010
GitHubGitHub
9