Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability found in Yii Framework Yii 2 Framework before v.2.0.47 allows the a remote attacker to execute arbitrary code via the runAction function. NOTE: the software maintainer's position is that the vulnerability is in third-party code, not in the framework.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yii SQL注入漏洞
Vulnerability Description
Yii是YII团队的开发的一套基于组件、用于开发大型Web应用的高性能PHP框架。 Yii Framework Yii 2 Framework v.2.0.47之前版本存在SQL注入漏洞。远程攻击者利用该漏洞通过runAction函数执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A