漏洞描述
【漏洞对象】山大鲁能 【漏洞描述】 该应用/Public/Video.aspx文件FID参数存在sql注入，可造成数据泄露，甚至服务器被入侵。
山大鲁能数字化校园平台Video.aspx页面FID参数-SQL注入
PoC代码
暂无相关漏洞推荐
- (CVE-2025-34433) AVideo 安装盐预测远程代码执行漏洞
- POC CVE-2010-0696: Joomla! Component Jw_allVideos - Arbitrary File Retrieval
- POC CVE-2014-9094: WordPress DZS-VideoGallery Plugin Cross-Site Scripting
- POC CVE-2016-1000134: WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
- POC CVE-2016-1000135: WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting
- POC CVE-2016-1000148: WordPress S3 Video <=0.983 - Cross-Site Scripting
- POC CVE-2021-24970: WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion
- POC CVE-2021-39350: FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting
- POC CVE-2022-0826: WordPress WP Video Gallery <=1.7.1 - SQL Injection
- POC CVE-2022-1392: WordPress Videos sync PDF <=1.7.4 - Local File Inclusion
- POC CVE-2022-2633: All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery
- POC CVE-2022-32770: WWBN AVideo 11.6 - Cross-Site Scripting
- POC CVE-2022-32771: WWBN AVideo 11.6 - Cross-Site Scripting