Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PEAR::Auth模块多个SQL注入漏洞
Vulnerability Description
PEAR::Auth模块包允许使用PHP创建认证系统。 PEAR::Auth模块在处理用户提交的认证数据时存在问题,远程攻击者可能利用此漏洞绕过认证。 一些PEAR::Auth贮藏容器后端(具体来说是DB和LDAP认证贮藏容器)在将用户输入提交给基础认证机制之前没有执行充分的验证,这可能允许恶意用户执行SQL注入攻击,伪造认证凭据,导致非授权访问。
CVSS Information
N/A
Vulnerability Type
N/A