Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) into parameters in a calculate action, and the (3) id parameter in an edit action to index.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
X-Changer多个SQL注入漏洞
Vulnerability Description
在X-Changer 0.2中存在多个SQL注入漏洞,远程攻击者可通过以下途径执行任意SQL命令:在一个calculate操作中的(1) from和(2) into参数,和在一个用于index.php的edit操作中的(3) id参数。
CVSS Information
N/A
Vulnerability Type
N/A