Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a gamecatalog action.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CommodityRentals Books/eBooks Rentals Script 'index.php' SQL注入漏洞
Vulnerability Description
CommodityRentals Books/eBooks Rentals 是一款开源的基于Windows、Unix、Linux 平台的书籍租赁软件。 CommodityRentals Books/eBooks Rentals Script的脚本index.php存在SQL注入漏洞。远程攻击者可以借助gamecatalog操作中的cat_id参数,执行任意的SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A