إرسال #588092: https://gitee.com/kiCode111/like-girl-v5.2.0 like-girl-v5.2.0 5.2.0 SQL Injection

The variable bz is controllable and directly concatenated into the SQL statement for execution, which poses a risk of injection.

• المصدر: ⚠️ https://github.com/adminnerr/cve/issues/11
• المستخدم: kai_kk (UID 85022)
• ارسال: 31/05/2025 01:27 PM (1 سنة منذ)
• الاعتدال: 11/06/2025 08:53 PM (11 days later)
• الحالة: تمت الموافقة
• إدخال VulDB: 312332 [kiCode111 like-girl 5.2.0 /admin/ipAddPost.php bz/ipdz حقن SQL]
• النقاط: 15