Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in a viewuser action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
dotProject 'index.php'SQL注入漏洞
Vulnerability Description
DotProject是一个免费的开源软件，一个基于WEB的PHP软件系统，一个项目管理的Framework。 dotProject 2.1.2版本中的index.php存在多个SQL注入漏洞。远程认证用户可以借助projects操作中的tab参数，执行任意的SQL指令；远程认证管理员 可以借助查看用户操作中的用户id参数，执行任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A