Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DB abstraction layer of OXID eSales 4.10.6 is vulnerable to SQL injection via the oxid or synchoxid parameter to the oxConfig::getRequestParameter() method in core/oxconfig.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OXID eSales SQL注入漏洞
Vulnerability Description
OXID eSales是德国OXID eSales公司的一套电子商务内容管理系统。该系统包括B2C、B2B等模块。 OXID eSales 4.10.6版本中的DB abstraction layer存在SQL注入漏洞。远程攻击者可通过向oxConfig::getRequestParameter()方法发送‘oxid’或‘synchoxid’参数利用该漏洞执行SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A