Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Freelancer calendar 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the SearchField parameter in a search action to (1) category_list.php, (2) Copy_of_calendar_list.php, (3) customer_statistics_list.php, (4) customer_list.php, and (5) task_statistics_list.php in the worldcalendar directory.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Freelancer calendar ‘SearchField’ 参数SQL注入漏洞
Vulnerability Description
Freelancer calendar 1.01及其之前版本中存在多个SQL注入漏洞。该漏洞源于对用户提供的数据在用于SQL查询之前没有经过充分过滤，攻击者可利用该漏洞操控该应用程序，访问或者修改数据，或者在底层数据库中利用潜在的漏洞。
CVSS Information
N/A
Vulnerability Type
N/A