Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) a_country parameter in a process action to affiliate_signup.php, (2) affiliate_banner_id parameter to affiliate_show_banner.php, (3) country parameter in a process action to create_account.php, or (4) entry_country_id parameter in an edit action to admin/create_account.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ol-commerce SQL注入漏洞
Vulnerability Description
ol-commerce是一套基于AJAX的新一代xtCommerce 2.x（电子商务购物车系统）产品。 ol-commerce 2.1.1版本中存在跨站脚本漏洞，该漏洞源于affiliate_signup.php脚本没有充分过滤‘a_country’参数，affiliate_show_banner.php脚本没有充分过滤‘affiliate_banner_id’参数，create_account.php脚本充分过滤‘country’参数，admin/create_account.php脚本执行编辑操作过
CVSS Information
N/A
Vulnerability Type
N/A