Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPCoin多个远程输入验证漏洞
Vulnerability Description
phpCOIN 1.2.0至1.2.1b的mod.php存在多个SQL注入漏洞，远程攻击者可以通过(1)faq模块中的faq_id参数，(2)pages模块中的id参数，(3)siteinfo模块中的id参数，(4)articles模块中的topic_id参数，(5)orders模块中的ord_id参数，(6)domains模块中的dom_id参数，或(7)invoices模块中的invd_id参数，来执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A