Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2019-16658
Disclosure Date: September 21, 2019 (last updated November 27, 2024)
TuziCMS 2.0.6 has index.php/manage/notice/do_add CSRF.
0
Attacker Value
Unknown
CVE-2019-16644
Disclosure Date: September 20, 2019 (last updated November 27, 2024)
App\Home\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Zhuanti/group?id= substring.
0
Attacker Value
Unknown
CVE-2019-16642
Disclosure Date: September 20, 2019 (last updated November 27, 2024)
App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring.
0
Attacker Value
Unknown
CVE-2018-10185
Disclosure Date: April 17, 2018 (last updated November 26, 2024)
An issue was discovered in TuziCMS v2.0.6. There is a CSRF vulnerability that can add an admin account, as demonstrated by a history.pushState call.
0
