Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the uname (username) and (2) pword (passwd) fields in (a) admin/default.asp; the (3) ID parameter to (b) listfull.asp or (c) printmain.asp; the (4) cat parameter to (d) listmain.asp, (e) searchoption.asp, or (f) searchmain.asp; the (5) Keyword parameter to (g) searchkey.asp; the (6) area parameter to searchmain.asp or searchoption.asp; the (7) searchin parameter to searchkey.asp; or the (8) cost1, (9) cost2, (10) acreage1, or (11) squarefeet1 parameters to searchoption.asp. NOTE: some of these details are obtained from third party information.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Grandora Rialto 多个SQL注入漏洞
Vulnerability Description
Rialto 1.6版本中存在多个SQL注入漏洞。远程攻击者可以借助(a)admin/default.asp中的(1)用户名和(2)密码字段，提交到(b)listfull.asp或(c)printmain.asp的(3)ID参数，到(d)listmain.asp,(e)searchoption.asp或(f)searchmain.asp的(4)cat参数，到(g)searchkey.asp的(5)关键词参数，到searchmain.asp或searchoption.asp的(6)area参数，到searc
CVSS Information
N/A
Vulnerability Type
N/A