CVE:CVE-2023-1483
CNNVD:CNNVD-202303-1459
XiaoBingBy TeaCMS是xiaobingby个人开发者的一个博客系统。
XiaoBingBy TeaCMS 2.0.2及之前版本存在SQL注入漏洞，该漏洞源于文件/admin/getallarticleinfo的代码存在问题，对参数searchInfo的操作会导致sql注入。
solution:Upgrade teacms_project teacms to a higher version than 2.0.2,and avoid the version (,2.0.2]