Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Mangboard SQL注入漏洞
Vulnerability Description
Mangboard是韩国Mangboard公司的一个电子商务网站。 Mangboard 2.0.4之前版本存在SQL注入漏洞,该漏洞源于对输入值未校验,存在SQL注入漏洞,攻击者利用该漏洞可以在运行公告板的服务器上执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A