Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ShopWind 路径遍历漏洞
Vulnerability Description
ShopWind是中国ShopWind公司的一款基于 Yii2.0 框架深度重构的 B2B2C、O2O 行业的电商系统软件。可以轻松创建和发布属于自己品牌的专业的电商平台，进行全方位的品牌宣传和产品推广。 Shopwind v3.4.2 版本及之前版本存在安全漏洞，攻击者利用该漏洞可通过/backend/controllers/DbController.php文件中的neirong参数删除任意文件。
CVSS Information
N/A
Vulnerability Type
N/A