Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to user/1/hregister.html, (3) usr_email parameter to user/1/hlogin.html, (4) useremail parameter to user/1/forgotpass.html, and the (5) q parameter to search/1.html. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hycus CMS index.php文件多个SQL注入漏洞
Vulnerability Description
当magic_quotes_gpc禁用时，Hycus CMS 1.0.3版本中的index.php文件中存在多个SQL注入漏洞。远程攻击者可以借助向user/1/hregister.html传递的(1)user_name以及(2)usr_email参数，(3)向user/1/hlogin.html传递的usr_email参数，(4)向user/1/forgotpass.html传递的useremail参数，以及(5)向search/1.html传递的q参数执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A