critical9.8
CVE-2021-46204
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
Impact
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\include\Model\Article.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Taogogo | Taocms | Version 3.0.2 |