Bylancer Quicklancer 漏洞列表

A SQL injection vulnerability exists in the Quicklancer 2.4, GET parameter 'range2', that has time-based blind SQL injection and a boolean-based blind SQL injection, which can be exploited remotely by unauthenticated attacker to execute arbitrary SQL queries in the database.

A SQL injection vulnerability exists in the Quicklancer 2.4, GET parameter 'range2', that has time-based blind SQL injection and a boolean-based blind SQL injection, which can be exploited remotely by unauthenticated attacker to execute arbitrary SQL queries in the database.

Bylancer Quicklancer 2.4 中发现一个漏洞，并被评为严重级别。该漏洞影响组件 GET 参数处理程序的文件/列表的一些未知处理。对参数range2 的操作会导致 SQL 注入，攻击者可利用该漏洞获取数据库权限

Bylancer Quicklancer是Bylancer公司的一个自由职业者平台。Bylancer Quicklancer 存在SQL注入漏洞。此漏洞是由于对用户发送的请求缺乏校验导致的。