CVE-2020-22205

ECShop 3.0 contains a SQL injection vulnerability in the admin/shophelp.php endpoint, exploitable via the id parameter (CVE-2020-22205). Multiple connected sources (CNVD-2021-44948, RH-Red Hat, NVD, CVE lists) describe the attack vector as injecting through id in admin/shophelp.php, enabling SQL ...