漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. The application directly incorporates unsanitized user inputs into SQL queries, allowing unauthenticated attackers to bypass authentication and gain full access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
E-commerce 安全漏洞
Vulnerability Description
E-commerce是Bhabishya Ghimire个人开发者的一个动态的电子商务网站。 E-commerce 1.0版本存在安全漏洞,该漏洞源于signup.inc.php端点未清理用户输入,可能导致SQL注入攻击和身份验证绕过。
CVSS Information
N/A
Vulnerability Type
N/A