CVE:CVE-2022-38329
CNNVD:CNNVD-202209-943
Shopxian CMS是中国zhangqiquan个人开发者的一款开源免费建站系统。
Shopxian CMS 3.0.0版本存在安全漏洞。攻击者利用该漏洞通过index.php/contents-admin_cat-finderdel-model-ContentsCat.html?id=17删除指定列。
solution:Upgrade shopxian shopxian_cms to a higher version than 3.0.0,and avoid the version 3.0.0