Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the SESSION_COOKIE_NAME (session ID) in a cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache::AuthCAS Cookie远程SQL注入漏洞
Vulnerability Description
Apache::AuthCAS是可配置的Apache认证模块。 Apache::AuthCAS模块中存在SQL注入漏洞，远程攻击者可能利用此漏洞非授权操作数据库。 在CPAN版本的516行，会话ID是直接从cookie获得的： $cookie =~ /.*$SESSION_COOKIE_NAME=([^;]+)(\s*;.*|\s*$)/; $sid = $1 || ""; 然后在544行未经任何过滤便传送给了get_session_data()函数，get_session_data()在1005行将$s
CVSS Information
N/A
Vulnerability Type
N/A