MolyX 2.8.0（魔力论坛）注射漏洞

魔力论坛最新版本 2.8.0 在登陆模块存在缺陷,通过精心构造代码获取管理员密码hash //login.php switch $INPUT'do' case 'login': $this-dologin; break; case 'logout': $this-dologout; break; case 'autologin': $this-autologin;---该函数存在漏洞 break; default: $this-loginpage; break; …… function autologin global $forums, $DB, $bboptions,...

Sql injection

SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access CUA 4.04735.p4 allows remote attackers to execute arbitrary SQL commands via the user user name field...

CVE-2008-3370: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the CUA Login Module in EMC Centera Universal Access CUA 4.04735.p4 allows remote attackers to execute arbitrary SQL commands via the user user name field...