CVE-2023-1483

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
XiaoBingBy	TeaCMS	2.0.0; 2.0.1; 2.0.2

References

https://gitee.com/xiaobingby/TeaCMS/issues/I6IJ0KExploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.223366Third Party Advisory
https://vuldb.com/?id.223366Third Party Advisory
https://gitee.com/xiaobingby/TeaCMS/issues/I6IJ0KExploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?ctiid.223366Third Party Advisory
https://vuldb.com/?id.223366Third Party Advisory

Timeline

Published: Mar 18, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-14849.8A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/u CVE-2023-14856.1A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown CVE-2023-14867.1A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the funct CVE-2023-14875.5A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects CVE-2023-14885.5A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the functio CVE-2023-14897.8A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerabilit CVE-2023-14905.5A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 CVE-2023-14915.5A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in CVE-2023-14925.5A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the functi CVE-2023-14935.5A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects the function 0x220019 CVE-2023-14949.8A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The mani CVE-2023-14958.8A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of