إرسال #587540: https://gitee.com/kiCode111/like-girl-v5.2.0 like-girl-v5.2.0 5.2.0 SQL Injection

The variable title is controllable and directly concatenated into the SQL statement for execution, which poses a risk of injection.

• المصدر: ⚠️ https://github.com/adminnerr/cve/issues/6
• المستخدم: kai_kk (UID 85022)
• ارسال: 30/05/2025 02:43 PM (1 سنة منذ)
• الاعتدال: 11/06/2025 08:52 PM (12 days later)
• الحالة: تمت الموافقة
• إدخال VulDB: 312328 [kiCode111 like-girl 5.2.0 /admin/aboutPost.php حقن SQL]
• النقاط: 15