Lucene search
PRIOn knowledge basePRION:CVE-2023-7185HistoryDec 31, 2023 - 12:15 p.m.
Sql injection
2023-12-3112:15:00
PRIOn knowledge base
www.prio-n.com
7
vulnerability
fakabao
sql injection
critical
file
shop/wxpay_notify.php
argument manipulation
exploit
public disclosure
identifier
vdb-249387
vendor
A vulnerability was found in 7-card Fakabao up to 1.0_build20230805. It has been classified as critical. This affects an unknown part of the file shop/wxpay_notify.php. The manipulation of the argument out_trade_no leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249387. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fakabao | eq | 1.0 build20230805 |
Related
cve
cve
CVE-2023-7185
2023-12-31 12:15:32
nvd
nvd
CVE-2023-7185
2023-12-31 12:15:32
cvelist
cvelist
CVE-2023-7185 7-card Fakabao wxpay_notify.php sql injection
2023-12-31 11:31:03