PDFdirectory 1.0之前版本中的多个SQL注入漏洞,允许远程攻击者通过与以下文件有关的多个未明向量执行任意SQL命令:(1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php或(13) anniv.php。
PDFdirectory 1.0之前版本中的多个SQL注入漏洞,允许远程攻击者通过与以下文件有关的多个未明向量执行任意SQL命令:(1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php或(13) anniv.php。