CVE-2022-4961

CVE-2022-4961 affects Weitong Mall 1.0.0, where the OrderDao.xml file (platform-shop\src\main\resources\com\platform\dao\OrderDao.xml) is vulnerable to SQL injection via the sidx/order parameter. Descriptions from connected sources confirm a critical issue with this specific file/functionality, b...

CVE-2022-4961 Weitong Mall OrderDao.xml sql injection

A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The...