CVE-2023-3528 - ThinuTech ThinuCMS category.php sql injection

Back Back to CVE browser

CRITICAL

ThinuTech ThinuCMS category.php sql injection

Published Jul 6, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.49%

Description

A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument cat_id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-233252.

Affected products

Vendor ThinuTech Product ThinuCMS Default
n/a
- Version
  1.5
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ThinuTech

ThinuCMS

n/a

Version	Status	Constraints
1.5	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44185
Advisory
https://vuldb.com/?ctiid.233252
signatureThird Party Advisory
https://vuldb.com/?id.233252
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44185		Advisory
https://vuldb.com/?ctiid.233252		signatureThird Party Advisory
https://vuldb.com/?id.233252		vdb-entrytechnical-descriptionThird Party Advisory