Sql injection

2021-04-2814:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

47.8%

JSON

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the “user_phone” parameter of a crafted HTTP request to the “admin.php” component.

CPENameOperatorVersion
mall_systemeq1.7

CPE	Name	Operator	Version
	mall_system	eq	1.7

References

gitee.com/koyshe/phpshe/issues/IQ8S8

0.001 Low

EPSS

Percentile

47.8%

JSON

Related for PRION:CVE-2020-18020