Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MIM.InfiniX Multiple index.php多个SQL注入漏洞
Vulnerability Description
MIM:InfiniX 1.2.003及其早期可能版本的index.php存在多个SQL注入漏洞会允许远程攻击者通过(1) 月参数 (2)日历操作中的年参数，或者 (3) 搜索格式中的一个搜索术语来执行任一SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A