Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Newsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter
Vulnerability Description
Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-based, blind, and boolean-based injection techniques. Attackers can inject malicious SQL code through the search parameter in endpoints like /admin/comment/records, /admin/category/records, /admin/news/records, and /admin/menu/childs to manipulate database queries and retrieve sensitive data.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Newsbull SQL注入漏洞
Vulnerability Description
Newsbull是Gürkan Uzunca个人开发者的一个新闻网站内容管理系统。 Newsbull 1.0.0版本存在SQL注入漏洞，该漏洞源于对多个端点中search参数的输入验证不足，可能导致SQL注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A