Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in wp-uploadfile.php in the Upload File plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the f_id parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Upload File 'wp-uploadfile.php' SQL注入漏洞
Vulnerability Description
WordPress是一款免费的论坛Blog系统。 WordPress中所使用的Upload File插件中wp-uploadfile.php文件没有验证某些用户所提交的参数,远程攻击者可以向该插件提交恶意请求执行SQL注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A