Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Moodle 'blog/edit.php'SQL注入漏洞
Vulnerability Description
Moodle的blog/edit.php中存在SQL注入漏洞，远程攻击者可以通过存储在未经insert_record函数适当处理的$blogEntry变量中的格式参数执行任意SQL命令(其中insert_record函数会调用adodb层(lib/adodb/adodb-lib.inc.php)中的adodb_column_sql，这不会将数据类型转换为int)。
CVSS Information
N/A
Vulnerability Type
N/A