Shipment 100-design Material Download System Security Vulnerabilities

CVE-2021-29350

SQL injection in the getip function in conn/function.php in ??100-???????? 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to...