| शीर्षक | Background injection exists in lmxcms |
|---|
| विवरण | Vulnerability name: SQL injection vulnerability
Bug description: in the application at http://127.0.0.1/lmxcms141/admin.php? An SQL injection vulnerability is present in m=Acquisi&a=caijiDataList&lid=. An attacker could exploit this vulnerability to perform malicious SQL queries, bypass authentication, access sensitive data, or perform malicious operations on a database.
Affected version: Full version
We can install the latest version of lmxcms, and then according to the above to repeat, log in the background and then input payload can be directly repeated, the use of difficulty is not high, it is recommended to use sqlmap to do so |
|---|
| स्रोत | ⚠️ http://www.lmxcms.com/ |
|---|
| उपयोगकर्ता | yuanshen (UID 53971) |
|---|
| सबमिशन | 06/09/2023 10:08 AM (3 साल पहले) |
|---|
| संयम | 16/09/2023 08:47 AM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 239858 [lmxcms तक 1.41 admin.php lid SQL इंजेक्शन] |
|---|
| अंक | 17 |
|---|