Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OXID eShop 6.3.4 - 'sorting' SQL Injection
Vulnerability Description
OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' parameter that allows attackers to insert malicious database content. Attackers can exploit the vulnerability by manipulating the sorting parameter to inject PHP code into the database and execute arbitrary code through crafted URLs.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
OXID eShop SQL注入漏洞
Vulnerability Description
OXID eShop是德国OXID公司的一套在线电子商务平台。 OXID eShop 6.3.4之前版本存在SQL注入漏洞，该漏洞源于sorting参数容易受到SQL注入攻击，可能导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A