Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WebCortex WebStores2000 SQL注入漏洞
Vulnerability Description
Webstores 2000是一款基于WEB的在线购物应用程序。 WebStores2000对用户提供的包含在URI参数中的数据缺少正确的过滤，远程攻击者可以利用这个漏洞进行SQL注入攻击，导致信息泄露或数据库被破坏。 问题存在于'browse_item_details.asp'脚本中，由于对输入缺少充分过滤，远程攻击者提交包含恶意SQL语句的URI，在应用程序处理时会导致修改原有的SQL逻辑，导致敏感信息泄露或数据库被破坏。
CVSS Information
N/A
Vulnerability Type
N/A