Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP ext/mysqli格式串处理漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP5的mysqli扩展在处理错误信息的输出时存在格式串处理问题，远程攻击者可能利用此漏洞在服务器上执行任意指令，PHP5捆绑了新的mysqli扩展，可使用异常信息得到错误报告。在发送这种错误的异常信息时，会将错误消息用作格式串。在某些条件和配置中，恶意的MySQL服务器或错误的SQL查询(如通过SQL注入)可以触发格式串漏洞，导致远程执行代码。
CVSS Information
N/A
Vulnerability Type
N/A