Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in GeheimChaos 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Temp_entered_login or (2) Temp_entered_email parameters to (a) gc.php, and in multiple parameters in (b) include/registrieren.php, possibly involving the (3) $form_email, (4) $form_vorname, (5) $form_nachname, (6) $form_strasse, (7) $form_plzort, (8) $form_land, (9) $form_homepage, (10) $form_bildpfad, (11) $form_profilsichtbar, (12) $Temp_sprache, (13) $form_tag, (14) $form_monat, (15) $form_jahr, (16) $Temp_akt_string, (17) $form_icq, (18) $form_msn, (19) $form_yahoo, (20) $form_username, and (21) $Temp_form_pass variables.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GeheimChaos多个SQL注入漏洞
Vulnerability Description
GeheimChaos 0.5及早期版本存在多个SQL注入漏洞，远程攻击者可借助以下参数执行SQL指令：(1) 提交到(a) gc.php脚本的Temp_entered_login参数或 (2) Temp_entered_email参数，以及(b) include/registrieren.php脚本中的多个参数，可能涉及 (3) $form_email，(4) $form_vorname，(5) $form_nachname，(6) $form_strasse，(7) $form_plzort，(8)
CVSS Information
N/A
Vulnerability Type
N/A