CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

PT-2021-10144

Name of the Vulnerable Software and Affected Versions: tp-shop versions 2.x through 3.x Description: A SQL Injection issue exists via the "/index.php/home/api/shop" API endpoint, specifically through the fBill parameter. Recommendations: For tp-shop versions 2.x through 3.x, avoid using the fBill...