CVE:CVE-2017-15969
CNNVD:CNNVD-201710-1321
PG All Share Video是一套视频共享网站脚本。
PG All Share Video 1.0版本中存在SQL注入漏洞。远程攻击者可通过向search/tag、friends/index或users/profile发送PATH_INFO利用该漏洞注入SQL命令。
solution:Upgrade pilotgroup allsharevideo to a higher version than 1.0,and avoid the version 1.0