Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
DeluxeBB 1.07 and earlier allows remote attackers to bypass SQL injection protection mechanisms via the login variable and certain other variables, by using lowercase "union select" or possibly other statements that do not match the uppercase "UNION SELECT."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DeluxeBB login变量 SQL注入漏洞
Vulnerability Description
DeluxeBB 1.07及之前版本可以使远程攻击者借助login变量及其他某些变量,通过使用小写的"union select" 或者与大写的"UNION SELECT"不匹配的其他可能的语句,绕过SQL注入防护机制。
CVSS Information
N/A
Vulnerability Type
N/A