Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in UseBB 0.5.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
UseBB 跨站脚本执行及SQL注入漏洞
Vulnerability Description
UseBB是一个易于使用的PHP/MySQL公告牌系统，支持多用户和管理功能。 UseBB代码中存在两个漏洞。第一个漏洞存在于处理颜色的代码中。由于没有过滤颜色值，因此攻击者可以对生成的<span>标签注入任意样式表信息。在Internet Explorer中这可能允许通过调用expression()函数执行Javascript。 另一个漏洞存在于实现magic_quotes_gpc=Off模拟的方式中。如果禁用了这个特性的话，_GET、_POST和_COOKIE就会自动addslashed()。但是_R
CVSS Information
N/A
Vulnerability Type
N/A