提交 #554698: WCMS 11 SQL injection vulnerability
| 标题 | WCMS 11 SQL injection vulnerability |
|---|---|
| 描述 | The mobile_phone parameter in the anonymous/setlogin interface of WCMS11 has an SQL injection vulnerability. This allows attackers to construct special SQL statements, leading to serious impacts such as website intrusion and data theft. |
| 来源 | ⚠️ https:/ |
| 用户 | icefoxh (UID 82165) |
| 提交 | 2025-04-09 11時54分 (1 年前) |
| 管理 | 2025-04-18 16時13分 (9 days later) |
| 状态 | 已接受 |
| VulDB条目 | 305653 [WCMS 11 AnonymousController.php mobile_phone SQL注入] |
| 积分 | 17 |