Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in DUware DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iPro parameter to detail.asp, (3) iSub parameter to sub.asp, (4) iCat parameter to catEdit.asp.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
DUware DUpaypal Pro 多个SQL注入漏洞
Vulnerability Description
DUware DUpaypal Pro 3.0存在多个SQL注入漏洞,远程攻击者可借助:(1) 提交到cat.asp的iCat参数,(2)提交到detail.asp的iPro参数,(3)提交到sub.asp的iSub参数,(4)提交到catEdit.asp的iCat参数,来执行任意SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A