| शीर्षक | Boyun Boyun PHPCMS <=1.4.20 SQL Injection |
|---|
| विवरण | A SQL injection vulnerability exists in BoYun PHPCMS (≤1.4.20) within the application/update/controller/Server.php file. The application fails to properly sanitize user-supplied input—such as the phone parameter—before incorporating it directly into SQL queries. This flaw allows remote attackers to manipulate database queries by injecting arbitrary SQL commands, potentially leading to unauthorized data access, modification, or even full database compromise. The vulnerability appears to stem from leftover or legacy test code that was not removed from the production release.
|
|---|
| स्रोत | ⚠️ https://note-hxlab.wetolink.com/share/sEjaSsXWRNz1 |
|---|
| उपयोगकर्ता | YELEIPENG (UID 73615) |
|---|
| सबमिशन | 26/06/2025 07:59 AM (1 वर्ष पहले) |
|---|
| संयम | 05/07/2025 07:39 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 315016 [BoyunCMS तक 1.4.20 Server.php phone SQL इंजेक्शन] |
|---|
| अंक | 20 |
|---|