ECShop 4.1.0 - SQL Injection

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information. id: CVE-2021-41460 info: name: ECShop 4.1.0 - SQL Injection author: SleepingBag945 severity: high description: | ECShop 4.1.0 has SQL injection vulnerability, which can be exploited ...

CVE-2021-41460

creationtimestamp| type| source ---|---|--- 2022-06-28 16:36:09+00:00| seen| https://t.me/cibsecurity/45291 2023-08-22 10:38:38+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41460.yaml...

CVE-2021-41460

ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2021-41460

ECShop 4.1.0 is affected by CVE-2021-41460 due to an SQL injection vulnerability (CWE-89). The issue allows arbitrary SQL queries, potentially leading to data leakage or unauthorized access. The Nuclei template confirms the vulnerability and notes remediation: upgrade to a newer ECShop version or...