ECSHOP suffers from SQL injection vulnerability (CNVD-2021-26064)

ECShop is a B2C independent online store system, suitable for businesses and individuals to quickly build a personalized online store. ECSHOP is vulnerable to SQL injection. An attacker can exploit this vulnerability to obtain sensitive information from the database...