CVE-2023-7185

CVE-2023-7185 affects 7-card Fakabao up to version 1.0_build20230805. A SQL injection vulnerability exists in the file shop/wxpay_notify.php, triggered by manipulating the argument out_trade_no. The vulnerability’s root cause is tied to an unknown function in that file. It is classified as critic...

CVE-2023-7185 7-card Fakabao wxpay_notify.php sql injection

A vulnerability was found in 7-card Fakabao up to 1.0build20230805. It has been classified as critical. This affects an unknown part of the file shop/wxpaynotify.php. The manipulation of the argument outtradeno leads to sql injection. The exploit has been disclosed to the public and may be used...