7-card Fakabao SQL Injection Vulnerability

7-card Fakabao is a 7-card open source application. A SQL injection vulnerability exists in 7-card Fakabao version 1.0build20230805 and earlier versions, which stems from a problem with an unknown function in shop/wxpaynotify.php...

7-card Fakabao SQL Injection Vulnerability

7-card Fakabao is a content publishing platform. A SQL injection vulnerability exists in 7-card Fakabao version 1.0build20230805 and prior versions, which stems from an issue with an unknown function in member/notify.php...

PT-2023-32928 · Unknown · 7-Card Fakabao

Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions up to 1.0 build20230805 Description: A critical issue has been found in the software, affecting an unknown functionality of the file shop/alipay notify.php. The manipulation of the out trade no argument leads to sql...