Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Mult-E-Cart Ultimate 2.4 SQL Injection via Vulnerable ID Parameters
Vulnerability Description
Mult-E-Cart Ultimate 2.4 contains multiple SQL injection vulnerabilities in inventory, customer, vendor, and order modules. Remote attackers with privileged vendor or admin roles can exploit the 'id' parameter to execute malicious SQL commands and compromise the database management system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
Mult-E-Cart Ultimate SQL注入漏洞
Vulnerability Description
Mult-E-Cart Ultimate是印度Mult-E-Cart公司的一个电商平台脚本。 Mult-E-Cart Ultimate 2.4版本存在SQL注入漏洞，该漏洞源于库存、客户、供应商和订单模块存在多个SQL注入漏洞，可能导致远程攻击者执行恶意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A