Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Telephone Directory 2008, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) code parameter in a confirm_data action to edit1.php and the (2) id parameter to view_more.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Telephone Directory 2008 个SQL注入漏洞
Vulnerability Description
Telephone Directory 2008存在多个SQL注入漏洞。当magic_quotes_gpc被中止时，远程攻击者可以借助confirm_data 操作中到edit1.php的代码参数和到view_more.php的ID参数，执行任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A