जमा करें #254971: S-CMS S-CMS-DWZ ≤v2.0_build20220529-20261006 SQL Injectionजानकारी

शीर्षकS-CMS S-CMS-DWZ ≤v2.0_build20220529-20261006 SQL Injection
विवरणThe S-CMS-DWZ software, specifically the file "s/index.php" in versions up to v2.0_build20220529-20261006, is susceptible to SQL injection attacks. The vulnerability arises from the direct concatenation of the "lid" parameter into an SQL query, allowing an attacker to potentially execute arbitrary SQL commands.
स्रोत⚠️ https://note.zhaoj.in/share/9yaojoQvesLu
उपयोगकर्ता
 glzjin (UID 59815)
सबमिशन19/12/2023 11:27 AM (3 साल पहले)
संयम30/12/2023 05:52 PM (11 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि249391 [S-CMS तक 2.0_build20220529-20231006 index.php?action=statistics lid SQL इंजेक्शन]
अंक19

Do you know our Splunk app?

Download it now for free!