Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) search.asp, (2) browse.asp, (3) details.asp, (4) showcat.asp, (5) users.asp, (6) addtomylist.asp, (7) modline.asp, (8) cart.asp, or (9) newuser.asp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
QuadComm Q-Shop多个SQL注入漏洞
Vulnerability Description
Q-Shop是一款基于WEB的电子商务程序。 Q-Shop存在多个SQL注入漏洞，远程攻击者可以利用这些问题修改数据库，获得敏感信息等。 Q-Shop包含的多个脚本由于没有正确过滤用户提交的SQL查询，可导致攻击者进行SQL注入攻击，可能以WEB进程权限执行任意命令，或获得系统敏感程序。 这些脚本如下： search.asp， browse.asp， details.asp， showcat.asp， users.asp， addtomylist.asp， modline.asp， cart.asp， n
CVSS Information
N/A
Vulnerability Type
N/A