Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in DUware DUportal Pro 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) nChannel parameter to default.asp, cat.asp, or detail.asp, (2) the iChannel parameter to search.asp, default.asp, result.asp, cat.asp, or detail.asp (3) the iCat parameter to cat.asp or detail.asp, (4) the iData parameter to detail.asp or result.asp, the (5) POL_ID, (6) POL_PARENT, (7) POL_CATEGORY, (8) CHA_NAME, or (9) CHA_ID parameters to inc_vote.asp, or the (10) tfm_order or (11) tfm_orderby parameters to toppages.asp, a different set of vulnerabilities than CVE-2005-1236.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DUportal Pro多个SQL注入漏洞
Vulnerability Description
DUware DUportal Pro 3.4存在多个SQL注入漏洞，远程攻击者可以通过(1)传到default.asp、cat.asp或detail.asp的nChannel参数，(2)传到search.asp、default.asp、result.asp、cat.asp或detail.asp的iChannel参数(3)传到cat.asp或detail.asp的iCat参数，(4)传到detail.asp或result.asp的iData参数，传到inc_vote.asp的(5)POL_ID，(6)PO
CVSS Information
N/A
Vulnerability Type
N/A