Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in plugins/pdfClasses/pdfgen.php in Andy's PHP Knowledgebase (Aphpkb) 0.95.4 allows remote attackers to execute arbitrary SQL commands via the pdfa parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Andy's PHP Knowledgebase 'pdfa' SQL注入漏洞
Vulnerability Description
Andy's PHP Knowledgebase(Aphpkb)是一套使用MySQL作为数据存储的知识库管理系统。该系统提供了搜索、标签、文章提交等功能。 Andy's PHP Knowledgebase(Aphpkb)0.95.4版本的plugins/pdfClasses/pdfgen.php中存在SQL注入漏洞。由于pdfa参数还没有经过正确过滤就被用于SQL查询,远程攻击者可以通过注入任意SQL代码,操作SQL查询。
CVSS Information
N/A
Vulnerability Type
N/A