Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pligg SQL注入漏洞
Vulnerability Description
Pligg 9.9以及之前的版本中存在多个SQL注入漏洞。远程攻击者可以借助以下参数：(1)在libs/link.php中未被适当处理过的对vote.php的id参数；(2)对trackback.php的id参数；(3)对submit.php的一个未明参数；(4)对story.php的查询中的requestTitle自变量；(5)requestID和(6)recommend.php中的requestTitle自变量；(7)对cloud.php的categoryID参数；(8)对out.php的主题参数；(
CVSS Information
N/A
Vulnerability Type
N/A