Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL commands and execute arbitrary code via the sess_username variable, as set by the php121un HTTP COOKIE parameter, which is used in multiple files including php121login.php. NOTE: the code execution occurs because the SQL query results are used in an include statement.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP121 php121language.php SQL注入漏洞
Vulnerability Description
PHP121 1.4 中的php121language.php存在SQL注入漏洞。这使得远程攻击者可以借助于sess_username变量执行任意SQL命令及任意代码，sess_username变量由php121un HTTP COOKIE 参数设置，并且php121un HTTP COOKIE 参数使用在包含php121login.php的多个文件中。注意：因为在包含语句中使用了SQL查询结果，因此执行了代码。
CVSS Information
N/A
Vulnerability Type
N/A