SQL injection vulnerability in the SHREF_NO parameter of PSTAR Freight Information Management System of Yinglian Logistics Technology (Shanghai) Co.

PSTAR Logistics Management System V4.0 is a logistics system. There is a SQL injection vulnerability in the SHREFNO parameter of the PSTAR Freight Information Management System of Yinglian Logistics Technology Shanghai Co: http://target/bill/billq.aspx, an attacker can use the vulnerability to...