Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Weitong Mall Product Statistics queryTotal access control
Vulnerability Description
A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
访问控制不恰当
Vulnerability Title
Weitong Mall 安全漏洞
Vulnerability Description
Weitong Mall(微同商城)是fuyang_lipengjun个人开发者的一个商场系统。 Weitong Mall 1.0.0版本存在安全漏洞,该漏洞源于对参数isDelete的错误操作导致访问控制不当。
CVSS Information
N/A
Vulnerability Type
N/A