Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly modify data via the id variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BasiliX Webmail数据库查询可插入SQL代码漏洞
Vulnerability Description
Basilix是一款基于WEB的邮件应用程序，支持邮件附件，地址簿和多语言支持。 Basilix对用户提交的用于SQL查询输入缺少正确的过滤，远程攻击者可以利用此漏洞获得数据库的敏感信息或者修改数据库内容。 Basilix的SQL查询在处理外部数据时缺少过滤，如： DELETE FROM table WHERE id=$id 攻击者可以提交"id"值给$id，会执行如下SQL命令，导致删除表中所有行： DELETE FROM table WHERE id=id
CVSS Information
N/A
Vulnerability Type
N/A