CVE-2023-3528

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument cat_id leads to sql injection. The attack may be launched remotely. The identifier of this vulnerability is VDB-233252.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 6, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-35297.5A vulnerability classified as problematic has been found in Rotem Dynamics Rotem CRM up to 20230729. This affects an unknown part of the filCVE-2023-352966.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-352978.1Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityCVE-2023-352987.5HTTP.sys Denial of Service VulnerabilityCVE-2023-352997.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-353008.8Remote Procedure Call Runtime Remote Code Execution VulnerabilityCVE-2023-353028.8Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityCVE-2023-353038.8USB Audio Class System Driver Remote Code Execution VulnerabilityCVE-2023-353047.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353057.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-353065.5Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityCVE-2023-353086.5Windows MSHTML Platform Security Feature Bypass Vulnerability
CVE-2023-3528: Critical severity, CVSS 9.8 | Vulnix