Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the searchid parameter. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MODx CMS index.php脚本'searchid'参数SQL注入漏洞
Vulnerability Description
MODx是美国MODX System公司的一套开源的PHP应用框架,它支持发布、更新、维护动态网站或Html静态页面网站的内容。 MODx 0.9.6.2及之前版本中的index.php存在SQL注入漏洞。当magic_quotes_gpc被中止时,远程攻击者可以借助搜索id参数,执行任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A