Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
manager/admin_ajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "m_id=1 AND SLEEP(5)" substring.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
joyplus-cms SQL注入漏洞
Vulnerability Description
joyplus-cms（悦视频）是一套基于PHP和MySQL的开源视频后台管理系统。该系统具有视频资源采集、用户反馈管理、地址自动解析和消息推送管理等功能。 joyplus-cms 1.6.0版本中的manager/admin_ajax.php文件存在SQL注入漏洞。远程攻击者可借助以‘m_id=1 AND SLEEP(5)’子字符串开头的特制POST数据利用该漏洞执行任意的SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A