Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) password, or (3) crypted_password parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
JAWS ControlPanel.php SQL注入漏洞
Vulnerability Description
Jaws是一款动态构建WEB站点的内容管理系统。 Jaws controlpanel.php脚本不正确处理用户提交的URI参数，远程攻击者可以利用这个漏洞无需要提供密码访问管理员控制面版。 由于controlpanel.php脚本对用户提交给"crypted_password"变量缺少正确的逻辑检查，攻击者提交类似''' or '2'='2''的数据，可导致逻辑错误，无需提供正确密码通过验证访问应用程序管理面版。
CVSS Information
N/A
Vulnerability Type
N/A