PT-2021-23907

Name of the Vulnerable Software and Affected Versions: ecshop version 2.7.3 Description: The issue is a SQL injection vulnerability located in the shopexecshopuploadapiclientapi.php file. This vulnerability can be exploited through the API endpoint /api/client/api.php, although the specific...

CVE-2021-43679: Improper Neutralization of Special Elements used in an SQL Command

ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\ecshop\upload\api\client\api.php...