Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attackers to cause a denial of service (crash or hang) and obtain the full pathname of the server via a request to a file in the ISAPI directory that is not an executable DLL, which triggers the crash when the DLL load fails, as demonstrated using Isapi\users.txt.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Holger_Zimmermann phpBB Small ShoutBox模块shoutbox_view.php SQL注入漏洞
Vulnerability Description
Small ShoutBox模块是phpBB论坛中所使用的一个留言板模块。 如果mode设置为delete的话,Small ShoutBox模块的shoutbox_view.php文件没有正确地过滤对id参数的输入便用在了SQL查询中: File (shoutbox_view.php) 50. $id = ( isset($HTTP_GET_VARS['id']) ) ? $HTTP_GET_VARS['id'] : $HTTP_POST_VARS['id']; 168. if ( $mode == "d
CVSS Information
N/A
Vulnerability Type
N/A