Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to execute arbitrary SQL commands via the limitquery_s parameter when the $projectid variable is less than 1, which prevents the $limitquery_s from being set within slides.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Crafty Syntax Image Gallery Slides.php SQL注入漏洞
Vulnerability Description
Eric Gerdes Crafty Syntax Image Gallery(CSIG)(又称PHP缩略图图片库)3.1g和早期版本的slides.php中存在SQL注入漏洞，可让远程认证用户执行任意的SQL命令，方式是通过在$projectid变量小于1情况下的limitquery_s参数，那是用来阻止在slides.php中设置$limitquery_s参数。
CVSS Information
N/A
Vulnerability Type
N/A