Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MyPHP Forum多个SQL注入漏洞
Vulnerability Description
MyPHP Forum是一个易于架设并且易于使用基于MySQL与PHP的论坛。它适合于那些需要一个简洁，高效的论坛但没有其它论坛通常所带的一些"臃肿"功能的中小网站。 MyPHP Forum 1.0存在多个SQL注入漏洞，远程攻击者可以通过(1)forum.php中的fid，(2)member.php中的成员参数，(3)forgot.php中的电子邮件参数或(4)include.php中的nbuser或nbpass参数来执行任意SQL代码。注：据后来报告，在3.0及后续版本中存在向量2。
CVSS Information
N/A
Vulnerability Type
N/A