Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Email Registration email_registration.module email_registration_user sql injection
Vulnerability Description
A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function email_registration_user of the file email_registration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated remotely. Upgrading to version 6.x-1.0 is able to address this issue. The patch is identified as 126c141b7db038c778a2dc931d38766aad8d1112. It is recommended to upgrade the affected component. VDB-222334 is the identifier assigned to this vulnerability.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Email Registration SQL注入漏洞
Vulnerability Description
Email Registration是drupalprojects开源的一个电子邮件注册应用程序。允许用户使用其电子邮件地址注册和登录。 Email Registration 6.x-1.0之前版本存在SQL注入漏洞，该漏洞源于对参数namenew的操作会导致sql注入。
CVSS Information
N/A
Vulnerability Type
N/A