| 标题 | Siempre CMS 1.3.6 SQL Injection in user_search_ajax.php |
|---|
| 描述 | The user_search_ajax.php file is vulnerable to SQL injection due to improper handling of user-supplied input. User inputs are passed directly to the database query without proper parameterization or prepared statements.
The vulnerability resides on user_search_ajax.php. |
|---|
| 来源 | ⚠️ https://github.com/drew-byte/SiempreCMS-SQLi-POC |
|---|
| 用户 | drewbyte (UID 89075) |
|---|
| 提交 | 2025-09-01 20時49分 (1 年前) |
|---|
| 管理 | 2025-09-08 16時35分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 323084 [SiempreCMS 直到 1.3.6 user_search_ajax.php name/userName SQL注入] |
|---|
| 积分 | 18 |
|---|