CVE-2021-29350

2021-04-2915:12:04

mitre

www.cve.org

sql injection

getip function

发货100-设计素材下载系统 1.1

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

46.1%

JSON

SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/product_add.php.

References

github.com/XD-519/Doc/blob/main/sql%20injection.md