Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious parameters can execute arbitrary SQL commands.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CMSWing SQL注入漏洞
Vulnerability Description
CMSWing是一套基于ThinkJS和MySQL的电子商务平台及CMS建站系统。该系统 CMSWing project version 1.3.8 存在SQL注入漏洞，该漏洞源于rechargeAction函数不检查balance参数，恶意参数可以执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A