漏洞标题
在 Yazteks E-Commerce Software 中使用 SQLi
漏洞描述信息
"Yaztek Software Technologies和Computer Systems E-Commerce Software中SQL命令('SQL注入')的特殊元素处理不当，可能导致SQL注入。此问题影响到了E-Commerce软件：直至20231229。
注： vendors early about this disclosure but did not respond in any way.
"
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
漏洞标题
SQLi in Yazteks E-Commerce Software
漏洞描述信息
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection.This issue affects E-Commerce Software: through 20231229.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
漏洞标题
Yaztek Software Technologies and Computer Systems E-Commerce Software 安全漏洞
漏洞描述信息
Yaztek Software Technologies and Computer Systems E-Commerce Software是Yaztek Software Technologies and Computer Systems公司的一个电子商务系统。 Yaztek Software Technologies and Computer Systems E-Commerce Software 20231229及之前版本存在安全漏洞，该漏洞源于存在SQL注入漏洞。
CVSS信息
N/A
漏洞类别
其他