SQL injection vulnerability in tongjin cube of financial stocks (affecting the security of stock information leakage)

SQL injection vulnerability in tongjin cube of financial stocks (affecting the security of stock information leakage)

Detailed description:

Client.mfniu.com was found to have the SQL injection vulnerability in the earlier version of phpcms v9 system which was not updated to the latest version. In addition, it was found that the master site was exposed to information leakage on the same server.

Proof of vulnerability:

Obtain the background account and password through SQL injection, and go to the background to further obtain website management permissions.

Obtain the passwords of multiple database accounts

Solution:

Update phpcmsv9 to the latest version.