Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in Active Bids allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to search.asp, (2) SortDir parameter to auctionsended.asp, and the (3) catid parameter to wishlist.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Active Bids多个SQL注入漏洞
Vulnerability Description
Active Bids是一款构建网上拍卖平台的工具软件。 Active Bids中存在多个SQL注入漏洞。远程攻击者可以借助执(1)到search.asp的搜索参数,(2)到auctionsended.asp的SortDir参数和(3)到wishlist.php的catid参数，执行任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A