Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in search.php in My Little Forum 1.5 and 1.6 beta allows remote attackers to execute arbitrary SQL commands via the phrase field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
My Little Forum search.php远程SQL注入漏洞
Vulnerability Description
my little forum是一套基于PHP和MySQL的互联网论坛应用程序。该应用程序采用传统树状视图展示信息,并支持图片上传、模板引擎、BB代码和表情符号等。 My Little Forum中存在SQL注入漏洞,成功利用这个漏洞的攻击者可以完全入侵基础数据库系统。 在search.php的第144行: ... $result = mysql_query("SELECT id, pid, tid, DATE_FORMAT(time + INTERVAL ". $time_difference." HO
CVSS Information
N/A
Vulnerability Type
N/A