Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten with static data in the extracted source code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MyBB rss.php SQL注入漏洞
Vulnerability Description
MyBB (又称MyBulletinBoard) 1.1.1的rss.php中存在SQL注入漏洞，远程攻击者可以通过comma参数执行任意SQL命令。 注意:从原报告看不出此攻击是怎样实现的，因为演示URL使用了以抽取的源代码中的静态数据重写的变量。
CVSS Information
N/A
Vulnerability Type
N/A