XiaoBingBy vulnerabilities
We track 2 vulnerabilities in XiaoBingBy products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 18, 2023.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest XiaoBingBy vulnerabilities
- 9.8 Critical severity
TeaCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be init
- 8.8 High severity
TeaCMS: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The ex