Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CyberStrong eShop 10expand.ASP SQL注入漏洞
Vulnerability Description
Cyberstrong eShop 4.2及其早期版本存在SQL注入漏洞。远程攻击者借助(1)10expand.asp,(2)10browse.asp,和 (3)20review.asp中的ProductCode参数盗取认证信息且获取特权。
CVSS Information
N/A
Vulnerability Type
N/A