漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote authenticated attacker to dump the underlying database.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Shopware SQL注入漏洞
Vulnerability Description
Shopware是德国Shopware公司的一套开源电子商务软件。 Shopware B2B-Suite 4.4.1 及之前版本存在安全漏洞，该漏洞允许经过身份验证的远程攻击者转储底层数据库。
CVSS Information
N/A
Vulnerability Type
N/A