CRITICAL
TuziCMS Article Module ArticleController.class.php index sql injection
Published Jan 12, 2023
9.8
CRITICALCVSS 3.1
EPSS 0.73%
Description
A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArticleController.class.php of the component Article Module. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-218151.
Affected products
- Vendor n/a Product TuziCMS Defaultn/a
- Version 2.0.6StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | TuziCMS | n/a |
|
- 2.0.6
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- https://github.com/yeyinshi/tuzicms/issues/12 exploitissue-trackingThird Party Advisory
- https://vuldb.com/?ctiid.218151 signaturepermissions-requiredPermissions RequiredThird Party Advisory
- https://vuldb.com/?id.218151 vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://github.com/yeyinshi/tuzicms/issues/12 | exploitissue-trackingThird Party Advisory | |
| https://vuldb.com/?ctiid.218151 | signaturepermissions-requiredPermissions RequiredThird Party Advisory | |
| https://vuldb.com/?id.218151 | vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jan 12, 2023
Updated Apr 7, 2025
Reserved Jan 12, 2023
Link CVE-2023-0243
CISA Vulnrichment
Updated Apr 7, 2025