जमा करें #572601: https://github.com/gongfuxiang/schoolcms schoolcms2.3.1 2.3.1 SQL injectionजानकारी

शीर्षकhttps://github.com/gongfuxiang/schoolcms schoolcms2.3.1 2.3.1 SQL injection
विवरणThis source code is developed using thinkphp 3.2.3 framework, There is a historical SQL injection vulnerability in the thinkphp3.2.3 framework,and if there are controllable variables in the find(), selete(), and delete() functions, there will be SQL injection,The variable id is a controllable variable
स्रोत⚠️ https://github.com/adminnerr/cve/issues/1
उपयोगकर्ता
 kai_kk (UID 85022)
सबमिशन07/05/2025 08:49 AM (1 वर्ष पहले)
संयम15/05/2025 06:14 PM (8 days later)
स्थितिस्वीकृत
VulDB प्रविष्टि309105 [gongfuxiang schoolcms 2.3.1 index.php?m=Admin&c=article&a=SaveInfo id SQL इंजेक्शन]
अंक18

Interested in the pricing of exploits?

See the underground prices here!