Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ProFTPD Server 1.3.1, with NLS support enabled, allows remote attackers to bypass SQL injection protection mechanisms via invalid, encoded multibyte characters, which are not properly handled in (1) mod_sql_mysql and (2) mod_sql_postgres.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ProFTPD字符编码SQL注入漏洞
Vulnerability Description
ProFTPD是一款开放源代码FTP服务程序。 ProFTPD在执行SQL查询之前没有正确地设置字符编码,攻击者可以在向服务器提交的SQL命令中内嵌无效编码的多字节字符,以绕过标准字符转义方式在服务器上执行恶意命令。成功攻击要求启用了NLS支持。
CVSS Information
N/A
Vulnerability Type
N/A