Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Internet Software Sciences Web+Center Cookie对象SQL注入漏洞
Vulnerability Description
Internet Software Sciences Web+Center 4.0.1版本存在多个SQL注入漏洞。远程攻击者可以借助（1）search.asp中的ISS_TECH_CENTER_LOGIN cookie以及（2）DoCustomerOptions.asp中一个或更多cookie来执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A