漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ViArt Shop'cart_save.php'跨站请求伪造漏洞
Vulnerability Description
ViArt Shop(又称Shopping Cart)3.5版本中的cart_save.php存在跨站请求伪造漏洞。远程攻击者可以借助保存操作中的cart_name参数,劫持对任意用户请求进行的身份认证。这些请求用于执行跨站脚本攻击。
CVSS Information
N/A
Vulnerability Type
N/A