Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
NZ Ecommerce index.php多个输入验证漏洞
Vulnerability Description
** 有异议 ** NZ Ecommerce 的 index.php 中存在跨站脚本攻击(XSS) 漏洞。 远程攻击者可以通过action参数注入任意Web脚本或HTML。 注：厂商在研究员的博客栏中对此问题尚有异议，CVE研究中提示该问题可能是一个合法问题。
CVSS Information
N/A
Vulnerability Type
N/A