Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GPS Tracking System 2.12 SQL Injection via username Parameter
Vulnerability Description
GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter. Attackers can submit crafted POST requests to the login.php endpoint with SQL injection payloads in the username field to gain unauthorized access without valid credentials.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
GPS Tracking System SQL注入漏洞
Vulnerability Description
GPS Tracking System是lahirutm个人开发者的一个GPS追踪系统。 GPS Tracking System 2.12版本存在SQL注入漏洞，该漏洞源于login.php中的username参数存在SQL注入问题，可能导致未经验证的攻击者绕过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A