Security Advisory

CVE-2021-44349

9.8
CRITICAL

Vulnerability Description

SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\Manage\Controller\DownloadController.class.php.
Published Date December 3, 2021
Official Source NIST NVD Advisory