Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An attacker can change the content of an SAP Commerce - versions 1905, 2005, 2105, 2011, 2205, login page through a manipulated URL. They can inject code that allows them to redirect submissions from the affected login form to their own server. This allows them to steal credentials and hijack accounts. A successful attack could compromise the Confidentiality, Integrity, and Availability of the system.
CVSS Information
N/A
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
Vulnerability Title
SAP Commerce 输入验证错误漏洞
Vulnerability Description
SAP Commerce是德国思爱普（SAP）公司的一套基于云的电子商务平台。该产支持销售管理、营销管理、订单管理和运营管理等。 SAP Commerce 1905、2005、2105、2011和2205版本存在输入验证错误漏洞，该漏洞源于攻击者可以通过操纵的URL更改登录页面的内容，可以注入代码使他们能够将受影响的登录表单的提交重定向到他们自己的服务器，这使他们能够窃取凭据并劫持帐户。
CVSS Information
N/A
Vulnerability Type
N/A