Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in index.php in Dreampics Gallery Builder allows remote attackers to execute arbitrary SQL commands via the exhibition_id parameter in a gallery.viewPhotos action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DreamPics Photo/Video Gallery 'exhibition_id' SQL注入漏洞
Vulnerability Description
DreamPicsDreampics Gallery是一款可定制的影音画廊工具软件,可以实现网站的内容和影音的管理。 DreamPicsDreampics Gallery Builder中的index.php存在SQL注入漏洞。 远程攻击者可以借助gallery.viewPhotos操作中的exhibition_id参数,执行任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A