Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a (1) g_reply or (2) g_permaPost action to the blog shard (engine/shards/blog.php), or a (3) g_viewContent action to the content shard (engine/shards/content.php).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Blursoft Blur6ex多个远程SQL注入漏洞
Vulnerability Description
Blursoft Blur6ex是一个流行的PHP论坛程序。 Blursoft Blur6ex对用户请求数据的处理存在输入验证漏洞,远程攻击者可能利用此漏洞对服务器执行SQL注入攻击,非法操作数据库。 Blur6ex的多个脚本中由于没有正确地验证ID参数的输入数据,远程攻击者可以利用SQL注入攻击执行任意SQL代码。
CVSS Information
N/A
Vulnerability Type
N/A