Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in popupnewsitem/ in the Pop Up News module 2.0 and possibly earlier for phpVMS allows remote attackers to execute arbitrary SQL commands via the itemid parameter. NOTE: this was originally reported as a problem in phpVMS.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpVMS Virtual Airline Administration ‘itemid’参数SQL注入漏洞
Vulnerability Description
phpVMS是一款免费的虚拟航空管理软件，支持多种ACARS应用，提供基于AJAX的管理平台、完善的财务报表和调度管理等功能。 phpVMS的Pop Up News模块2.0及之前的版本中的popupnewsitem/中存在SQL注入漏洞。远程攻击者可通过‘itemid’参数利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A