漏洞标题
代码-项目 Simple Art Gallery 管理员主页.php SQL注入
漏洞描述信息
代码项目:简易艺术画廊 adminHome.php SQL注入
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
code-projects Simple Art Gallery adminHome.php sql injection
漏洞描述信息
A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223399.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
漏洞类别
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
漏洞标题
Simple Art Gallery SQL注入漏洞
漏洞描述信息
Simple Art Gallery是Simple Art Gallery公司的一个艺术画廊应用程序。 code-projects Simple Art Gallery 1.0版本存在SQL注入漏洞,该漏洞源于文件adminHome.php的未知功能存在问题,对参数reach_city的操作会导致sql注入。
CVSS信息
N/A
漏洞类别
SQL注入