CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-21806

SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php...

CVE-2020-21806

The collected documents confirm a concrete vulnerability: CVE-2020-21806 affects ECTouch v2, with a SQL Injection on the shop page (index.php). The root cause cited in CNNVD-202107-2173 and related entries is failure to filter special characters in input, enabling an attacker to execute arbitrary...