Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Les VanBrunt AdRotate Pro SQL命令注入漏洞
Vulnerability Description
AdRotate Pro是一个免费的Perl脚本包，用来在网页上轮换放置广告条。它包括管理工具，后台使用MySQL驱动。 AdRotate Pro存在输入验证漏洞，可以使远程攻击者非法操作数据库。 软件包中有一个adrotate.pm的模块，其中的"get_input"过程来处理客户端的输入，结果放在'in'关联数组里。AdRotate脚本用'in'中的值构造SQL语句而不对值进行合法性检查。这样使通过SQL命令注入的手段非法操作数据库的内容成为可能。因为一些数据库的内容会直接在shell命令中被使用到，
CVSS Information
N/A
Vulnerability Type
N/A