漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the (1) group, (2) seite, and (3) id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows resultant path disclosure when the SQL queries are invalid.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
APT-webshop-system modules.php 多个SQL注入漏洞
Vulnerability Description
APT-webshop-system 4.0 PRO,3.0 BASIC及3.0 LIGHT中的modules.php存在多个SQL注入漏洞。这使得远程攻击者可以借助于参数(1)group,(2)seite和(3)id执行任意SQL命令。该漏洞可能涉及artikel功能。注:当SQL查询无效时,该漏洞也可能造成结果路径泄露。
CVSS Information
N/A
Vulnerability Type
N/A