Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in list.php in University of Queensland Library Fez 1.3 and 2.0 RC1 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter in a subject action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
University of Queensland Fez 'list.php' SQL注入漏洞
Vulnerability Description
University of Queensland Library Fez是昆士兰大学图书馆使用的一种基于Fez开发的管理和维护系统 University of Queensland Library Fez 1.3和2.0 RC1版本中的list.php存在SQL注入漏洞。远程攻击者可以借助subject操作中的parent_id参数，执行任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A