Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPGroupware登陆SQL命令可执行漏洞
Vulnerability Description
PHPGroupware是一款免费开放源代码的群件系统，由PHPGroupware项目组开发维护并通过PHP语言实现。 PHPGroupware在登陆(login)字段中没有正确处理用户输入数据，导致远程攻击者可以在服务器上执行任意SQL命令。 问题存在于登陆(login)字段没有对用户输入进行充分检查，攻击者可以在此字段输入中嵌入SQL命令，通过使用特殊字符(')，导致通过登陆(login)字段传递SQL命令并在系统上执行。 另外，此问题可以导致攻击者利用已存在的数据库进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A