Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Outfront Spooky Login SQL访问验证漏洞
Vulnerability Description
Spooky Login是一款商业WEB访问控制和帐户管理软件，由Outfront分发和维护，设计用于Microsoft IIS Web服务器。 Spooky Login对用户提交的密码字段的数据缺少正确充分的检查，可导致远程攻击者操作SQL查询绕过验证访问系统。 由于Spooky Login在判别密码字段的SQL查询逻辑不正确，攻击者可以构建特殊的数据提交给Spooky Login登录页面的密码字段，无需知道密码就可以绕过验证机制，攻击者可能以管理员权限访问系统。 <**>
CVSS Information
N/A
Vulnerability Type
N/A