Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CS-Cart core/user.php脚本SQL注入漏洞
Vulnerability Description
CS-Cart是CS-Cart团队开发的一套基于PHP和MySQL的电子商务软件系统。该系统支持第三方软件扩展、自定义促销策略、产品筛选定义等。 CS-Cart的/core/user.php脚本中存在SQL注入漏洞，允许远程攻击者绕过认证或从基础数据库检索任意数据。 以下是有漏洞的代码段： if (fn_get_cookie(AREA_NAME . '_user_id')) { $udata = db_get_row("SELECT user_id, user_type, tax_exempt, last
CVSS Information
N/A
Vulnerability Type
N/A