Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin. (As an admin, an attacker can upload a PHP shell and execute remote code on the operating system.)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Codoforum SQL注入漏洞
Vulnerability Description
Codoforum是一套基于PHP和MySQL的论坛软件。 Codoforum 4.9版本之前存在SQL注入漏洞。攻击者可以通过泄漏的管理员密码重置令牌绕过管理员页面。
CVSS Information
N/A
Vulnerability Type
N/A