Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Webscriptworld Web Shop Manager远程任意命令执行漏洞
Vulnerability Description
Web Shop Manager允许用户使用基于WEB的集中管理接口程序对在线商店进行全功能维护。 Web Shop Manager的搜索引擎功能对用户提交数据缺少过滤,远程攻击者可以利用这个漏洞以WEB进程权限在系统上执行命令。 Web Shop Manager的搜索功能对一些元字符如"|"缺少正确处理,远程攻击者可以在Web Shop Manager中的搜索框中输入"|"字符并追加任意想要执行的系统命令,就可以以Web Shop Manager的进程执行。
CVSS Information
N/A
Vulnerability Type
N/A