ECTouch SQL Injection Vulnerability

ECTouch is an application. An open source mobile mall system to create an enterprise exclusive mobile mall. ECTouch suffers from a SQL injection vulnerability, which originates from the SQL injection vulnerability in ECTouch v2 generated through the integralmin parameter in index.php. An attacker...

CVE-2020-18144

SQL Injection Vulnerability in ECTouch v2 via the integralmin parameter in index.php...

Sql injection

SQL Injection Vulnerability in ECTouch v2 via the integralmin parameter in index.php...

CVE-2020-18144

SQL Injection Vulnerability in ECTouch v2 via the integralmin parameter in index.php...

CVE-2020-18144

CVE-2020-18144 is a SQL injection vulnerability in ECTouch v2 exploited via the integral_min parameter in index.php. Root cause: improper input handling leads to SQL commands being executed. Affected software: ECTouch v2 (open-source mobile mall system). Impact (per sources): high severity with p...