Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
bBlog rss.php远程SQL注入漏洞
Vulnerability Description
bBlog是一款基于PHP的BLOG系统。 bBlog包含的rss.php脚本不正确处理用户提交的URI输入，远程攻击者可以利用这个漏洞进行SQL注入攻击，可以获得敏感信息或更改数据库。 rss.php脚本对用户提交的$p参数缺少过滤，就直接传递给$bBlog->make_post_query()函数，攻击者提交特殊的SQL数据作为$p参数数据，可以更改原有SQL逻辑，可以获得敏感信息或更改数据库。
CVSS Information
N/A
Vulnerability Type
N/A