CVE-2023-7183

CVE-2023-7183 affects 7-card Fakabao up to 1.0_build20230805. The vulnerability is a SQL injection in the file shop/alipay_notify.php caused by improper handling of the out_trade_no parameter (unknown function issue cited). Public exploit and disclosure have been noted. Impact is reported as high...

7-card Fakabao SQL Injection Vulnerability

7-card Fakabao is a content publishing platform. A SQL injection vulnerability exists in 7-card Fakabao 1.0build20230805 and classified as critical version and prior versions, which stems from an issue with an unknown function in shop/alipaynotify.php...

PT-2023-32928 · Unknown · 7-Card Fakabao

Name of the Vulnerable Software and Affected Versions: 7-card Fakabao versions up to 1.0 build20230805 Description: A critical issue has been found in the software, affecting an unknown functionality of the file shop/alipay notify.php. The manipulation of the out trade no argument leads to sql...