Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpPass accesscontrol.php SQL注入漏洞
Vulnerability Description
phpPass是一款允许对网页进行访问保护的脚本，可以对页面设置用户名和密码。 phpPass中的accesscontrol.php脚本没有充分过滤用户提交的输入，远程攻击者可以利用这个漏洞提交恶意SQL命令，绕过安全检查，未授权访问保护页面。 由于accesscontrol.php脚本对输入没有进行充分检查，构建特殊的SQL注入accesscontrol.php脚本，可导致更改SQL逻辑，绕过保护而访问受限制资源。
CVSS Information
N/A
Vulnerability Type
N/A