Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id parameter to bugs.aspx, (2) the row_id parameter to delete_query.aspx, the (3) new_project or (4) us_id parameter to edit_bug.aspx, or (5) the bug_list parameter to massedit.aspx. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ifdefined BugTracker.NET多个SQL注入漏洞
Vulnerability Description
BugTracker.NET 是一款基于web的开源bug追踪系统。 BugTracker.NET 3.4.5之前版本中存在多个SQL注入漏洞。远程认证用户可以借助(1)向bugs.aspx文件传输的qu_id参数，(2)向delete_query.aspx文件传输的row_id参数，向edit_bug.aspx文件传输的(3)new_project或(4)us_id参数，或者(5)向massedit.aspx文件传输的bug_list参数执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A