Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHPKit 路径参数 SQL注入漏洞
Vulnerability Description
PHPKit 1.6.1 RC2中存在SQL注入漏洞。当路径参数被设置成faq/faq.php时,远程攻击者可以借助catid参数,注入任意的SQL指令。此外,攻击者还可以借助涉及guestbook/print.php的未明向量,注入任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A