CVE-2023-0244

Published January 12th, 2023

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuController.class.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-218152.

yeyinshi/tuzicms

TuziCMS（兔子cms）是基于ThinkPHP3.2框架开发的企业网站管理系统，提供更方便、更安全的WEB应用开发体验，国内PHP+MYSQL 开源建站程序，它具有操作简单、功能强大、稳定性好、扩展性强，二次开发及后期维护方便，可以帮您快速构建起一个强大专业的企业网站。交流官方QQ群：383851010

GitHub