Yii Framework 'Search'表单字段SQL注入漏洞

Basic Fields

SSV ID:
SSV-60475
Find Time:
Unknown
Submit Time:
2012-11-23
Level:
Category:
SQL 注入
Component:
Yii Framework
(1.1.8)
Author:
Unknown
Submitter:
Knownsec
CVE-ID：
Add
CNNVD-ID：
Add
CNVD-ID：
Add
ZoomEye Dork：
Add

Source

Detail

Contributor Knownsec Got  0.85KB
Loading icon
ximumu 000 have 5  exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor M1ts3c totally have   10.8KB
Login to exchange

ximumu 15号 None etc 13 Exchange

Reference Linking

Solutions

Temp Solutions

Official Solution

Defense Solutions

Timeline

  • 发现/披露了漏洞
  • 2012-11-23 提交了漏洞
  • 2012-11-23 提交补充了漏洞详情
  • 2015-12-04 提交更新了 PoC

Related Vuls

Popularity 5810
Need to bind phone before comment. Bind Now

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes

京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文