TCCMS SQL注入漏洞

- AV AC AU C I A
发布： 2025-04-13
修订： 2025-04-13

### 简要描述： TCCMS SQL注入漏洞 ### 详细说明： /app/controller/index.class.php public function search() { $_Obj = M("news"); $skey = $_POST["key"]; $where = empty($skey) ? "1=1" : "title like '%$skey%'";//注入 $_Obj->field("id,uid,classid,smallmemo,title,photo,photo_s,addtime,hits,isphoto,levels,top,flashpic,special,reply"); $_Obj->pageSize = 40; $_Obj->where($where); $objAry = $_Obj->getList(); $categoryObj = M("category"); $classId = intval($_GET['classid']); $isParent = $categoryObj->ifHavePid($classId); $categoryAry = array(); if (empty($classId)) { //没有栏目ID $categoryAry = $categoryObj->field("id, pid, name")->where("mid=1 and pid = 0")->limit(1000)->find(); } else if ($isParent) { //有子栏目 $categoryAry = $categoryObj->field("id, pid, name")->where("mid=1 and pid = " . $classId)->limit(1000)->find(); } else { //无子栏目 $pObj = $categoryObj->load($classId); $pId = $pObj->pid; $categoryAry = $categoryObj->field("id, pid, name")->where("mid=1 and pid = " . $pId)->limit(1000)->find(); } //关键字 ###...

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有0条受影响产品信息