emlog v2.6.20 ai.php Arbitrary SQL Execution Vulnerability

脆弱性概要 の ファイル内の 関数に、任意のSQL実行の脆弱性が存在します。攻撃者は任意の SQL コマンドを実行でき、データベースの完全な支配、データ漏洩、またはシステムの破壊が懸念されます。 影響範囲 影響バージョン: v2.6.20 修正バージョン: なし 修正方法 SQL インジェクション攻撃を防ぐため、 関数の修正を推奨します。具体的な修正コードは以下の通りです： ```php public static function queryDatabase($sql, $confirm_code = '') { $db = Database::getInstance(); $sql = trim($sql); if (preg_match('/^.(SELECT throw new Exception("クエリ文の実行が禁止されています"); } if (preg_match('/^.(SELECT throw new Exception("クエリ文の実行が禁止されています"); } $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace('/\s+/', ' ', $sql); $sql = preg_replace

目標達成すべての支援者に感謝 — 100%達成しました！

emlog v2.6.20 ai.php Arbitrary SQL Execution Vulnerability

このソースからの他の記事

目標達成 すべての支援者に感謝 — 100%達成しました！

emlog v2.6.20 ai.php Arbitrary SQL Execution Vulnerability

このソースからの他の記事

目標達成すべての支援者に感謝 — 100%達成しました！