CVE-2025-1544: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in dingfanzu CMS up to 20250210. Affected is an unknown function of the file /ajax/loadShopInfo.php. The manipulation of the argument shopId leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2025-7525

Name of the Vulnerable Software and Affected Versions dingfanzu CMS up to 20250210 Description A critical vulnerability was found in the file /ajax/loadShopInfo.php, where the manipulation of the shopId argument leads to SQL injection. This issue can be exploited remotely. The vendor was contacte...