Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpMyShop compte.php SQL指令注入漏洞
Vulnerability Description
myphpshop是一款小型的电子商务服务程序。 myphpshop没有充分过滤用户提供的输入，远程攻击者可以利用这个漏洞提供恶意参数，使的SQL逻辑修改，未经认证访问系统。 myphpshop包含的compte.php脚本文件对'identifiant'和'password'变量缺少正确过滤，攻击者提供类似''=''的SQL表达式，就可以导致修改原来系统的SQL逻辑，认为条件一直为真，结果可使远程攻击者绕过myphpshop验证/注册过程访问系统。
CVSS Information
N/A
Vulnerability Type
N/A