Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via (1) the fm_data[id] parameter to calendar.php and (2) the $ad['acc'] variable in adminlogin.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
2200net Calendar多个SQL注入漏洞
Vulnerability Description
2200net Calendar system 1.2中存在多个SQL注入漏洞。在禁用gpc_magic_quotes的情况下，远程攻击者可以借助(1)指向calendar.php的fm_data[id]参数和(2)adminlogin.php中的$ad['acc']变量执行任意SQL命令并绕过认证。
CVSS Information
N/A
Vulnerability Type
N/A