Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CS-Cart administration section 安全漏洞
Vulnerability Description
CS-Cart是CS-Cart团队开发的一套基于PHP和MySQL的电子商务软件系统。该系统支持第三方软件扩展、自定义促销策略、产品筛选定义等。administration section是其中的一个管理组件。 CS-Cart 4.6.2及之前的版本中的administration section的‘files’函数中存在安全漏洞。攻击者可利用该漏洞执行任意的PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A