漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. NOTE: the code execution occurs because the SQL query results are used in an include statement.
漏洞信息
N/A
漏洞
N/A
漏洞
PHP121 php121language.php SQL注入漏洞
漏洞信息
PHP121 1.4 中的php121language.php存在SQL注入漏洞。这使得远程攻击者可以借助于sess_username变量执行任意SQL命令及任意代码,sess_username变量由php121un HTTP COOKIE 参数设置,并且php121un HTTP COOKIE 参数使用在包含php121login.php的多个文件中。注意:因为在包含语句中使用了SQL查询结果,因此执行了代码。
漏洞信息
N/A
漏洞
N/A