PT-2022-18395

Name of the Vulnerable Software and Affected Versions Cscms Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. It affects the component dance Dance.php del. Recommendations For Cscms Music Portal System version 4.2, consider restricting access to th...

PT-2022-18396

Name of the Vulnerable Software and Affected Versions Cscms Music Portal System version 4.2 Description A blind SQL injection issue was discovered in the Cscms Music Portal System. The vulnerability is located in the dance Dance.php hy component. Recommendations For Cscms Music Portal System...

Cscms 3.5 /app/controllers/dance.php SQL注入漏洞

No description provided by source...

程氏CMS v3.5 app/controllers/dance.php SQL注入漏洞

0x01 漏洞详情 漏洞页面 app/controllers/dance.php public function so $data='';$datacontent=''; $fid = $this-security-xssclean$this-uri-segment3; //方式 $key = $this-security-xssclean$this-input-getpost'key', TRUE; //关键字 $page = intval$this-input-get'p', TRUE; //页数 if$page==0 $page=1;...