Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in BearAdmin 0.5. There is admin/admin_log/index.html?user_id= SQL injection because admin\controller\AdminLog.php constructs a MySQL query improperly.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
BearAdmin SQL注入漏洞
Vulnerability Description
BearAdmin是一套基于ThinkPHP5和AdminLTE的后台管理系统。 BearAdmin 0.5版本中存在SQL注入漏洞，该漏洞源于admin\controller\AdminLog.php页面没有正确的构建MySQL查询。远程攻击者可通过向admin/admin_log/index.html页面发送‘user_id’参数利用该漏洞执行SQL命令（如：获取用户MySQL的版本）。
CVSS Information
N/A
Vulnerability Type
N/A