TeaCMS vulnerabilities

2 known vulnerabilities in TeaCMS from XiaoBingBy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  TeaCMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-1483Mar 18, 2023XiaoBingBy

  A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be init

• 8.8 High severity

  TeaCMS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-1398Mar 14, 2023XiaoBingBy

  A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /admin/upload. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The ex