Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2002-2304
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MyPHPSoft MyPHPLinks SQL注入管理验证可绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MyPHPLinks是由MyPHPSoft开发维护的开放源代码PHP应用程序，可使用在Unix、Linux、Windows操作系统下。 MyPHPLinks中的checksession.php脚本对idsession变量缺少正确检查，远程攻击者可以利用这个漏洞绕过验证无需密码访问管理接口。 checksession.php脚本对用户的权限检查基于idsession变量，由于对由用户提交的idsession变量值缺少充分的过滤，攻击者可以提供类似''=''的变量值给脚本判断，可修改SQL查询而绕过验证，未授
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-n/a n/a -
II. Public POCs for CVE-2002-2304
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2002-2304
Please Login to view more intelligence information
New Vulnerabilities
Product: n/a
Vendor: n/a
V. Comments for CVE-2002-2304

No comments yet

Leave a comment