Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Fusion Messages.PHP SQL注入漏洞
Vulnerability Description
PHP-Fusion 6.00.109的 messages.php存在SQL注入漏洞。远程攻击者可以借助对messages.php的Search and Sort 选项中的srch_text 参数，获取路径信息并可能执行任意SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A