Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Net.Commerce远程执行任意命令漏洞
Vulnerability Description
Net.Commerce是IBM发行的Websphere的一部分。它提供了一些通用特性使电子商务变得更加容易，其性能和可靠性也有独到之处。 它默认支持的宏特性未对用户输入进行适当的检查，远程攻击者可以利用SQL Injection技术以帐号DB2INST1的权限执行任意SHELL命令。 IBM已经修正了随Net.Commerce 3.2、WebSphere Commerce Suite 4.1发布的有安全漏洞的宏，但是用户自定义宏可能存在同样的安全漏洞。WebSphere Commerce Suite 5
CVSS Information
N/A
Vulnerability Type
N/A