Itech Multi Vendor Script product-list.php sql injection

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Ambit Technologies iTech Multi Vendor Script SQL注入漏洞

Ambit Technologies iTech Multi Vendor Script是印度Ambit Technologies公司的一种流行且具有成本效益的解决方案，可用于启动您的电子商务网站。 Ambit Technologies iTech Multi Vendor Script 6.49版本存在安全漏洞，该漏洞源于存在不安全的文件/multi-vendor-shopping-script/product-list.php，攻击者利用该漏洞可以远程发起攻击。

N/A

N/A