Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the (1) sectionID parameter to admin/managersection.php, (2) userID parameter to admin/edituser.php, (3) username parameter to admin/admin.php, or (4) title parameter to admin/managerrelated.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Absolut Engine SQL注入漏洞
Vulnerability Description
Absolut Engine是一套开源的新闻发布系统/内容管理系统（CMS）/PHP框架。该系统提供用户访问控制，发布、修改、删除文章，图片管理和文件管理等功能。 Absolut Engine 1.73版本中存在SQL注入漏洞，该漏洞源于admin/managersection.php脚本没有充分过滤‘sectionID’参数；admin/edituser.php脚本没有充分过滤‘userID’参数；admin/admin.php脚本没有充分过滤‘username’参数；admin/managerrela
CVSS Information
N/A
Vulnerability Type
N/A