Sql injection

SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliateck.php...

CVE-2020-22206

CVE-2020-22206: SQL injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php. Affected software: ECShop 3.0. Root cause is unparameterized SQL in the affiliate_ck.php path. Reported impact in sources aligns with high/critical severity (NVD metrics: CVSS v2 base score 7.5; CVSS v3.1...