tccms v8 注入一枚

简要描述： 过滤不严。 详细说明： 在app/controller/picture.class.php 中 public $objName = 'picture'; public function all $Obj = M$this-objName; $categoryObj = M"category"; $Obj-pageSize = 20; $where = "1=1"; $key = $POST'key'; $cid = $GET'cid'; if $key != "" $where .= " and id = '" . $key . "' or title like...

Galette <=0.63 picture.class.php SQL注入漏洞

No description provided by source...

Galette <=0.63.3 picture.class.php文件任意文件写入漏洞

No description provided by source...

CVE-2012-2338: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the idadh parameter to picture.php...