Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to (1) browse_videos.php or (2) members.php. NOTE: the cat parameter is already covered by CVE-2008-4157.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Vastal I-Tech phpVID 多个SQL注入漏洞
Vulnerability Description
Vastal I-Tech phpVID是印度Vastal I-Tech公司的一套视频分享软件。该软件支持浏览视频、评论视频、上传视频等。 Vastal I-Tech phpVID 1.2.3版本中存在多个SQL注入漏洞。远程攻击者可通过向browse_videos.php或members.php脚本传递‘n’参数，利用这些漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A