Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register country parameter, the /register countryCode parameter, the /register cpu parameter, the /register isp parameter, the /register lat parameter, the /register lon parameter, the /register org parameter, the /register query parameter, the /register region parameter, the /register regionName parameter, the /register timezone parameter, the /register vId parameter, the /register zip parameter, or the /tping id parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Trape SQL注入漏洞
Vulnerability Description
Trape是一套开源的互联网跟踪识别工具。该功能够对会话进行远程识别，模拟钓鱼攻击。 Trape 2017-11-05之前的版本中存在SQL注入漏洞。远程攻击者可借助多个参数或包头利用该漏洞执行SQL命令。（多个参数和包头包括：‘/red’、‘vId’、‘country’、‘countryCode’、‘cpu’、’isp‘、’lat‘、’lon‘、’org‘、’query‘、’region‘、’/regionName‘、’timezone‘、’vId‘、’zip‘、’id‘参数或User-Agent HT
CVSS Information
N/A
Vulnerability Type
N/A