CNCVE编号：CNCVE-20010425 CVE编号：CAN-2001-0425 安全级别：高 漏洞中文描述： AdCycle 0.78b中的AdLibrary.pm允许远程攻击者通过变形的代理：HTTP请求的报头来获得AdCycle的权限，此HTTP请求插入到一个验证登陆信息SQL查询结果中。 漏洞英文描述： AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to verify login information. 漏洞参考： Reference: BUGTRAQ:20010219 Adcycle 0.78b Authentication Reference: URL:http://www.securityfocus.com/archive/1/163942 Reference: BID:2393 Reference: URL:http://www.securityfocus.com/bid/2393 系统类型： Unix/Linux Win95/98/ME Win2000/NT 漏洞类型：输入有效性检查错误