易想团购(easethink) v1.4 /ajax.php check_field 参数 SQL注入漏洞

漏洞相关文件 1. /ajax.php if$REQUEST'act'=='countbuytotal' requireonce APPROOTPATH."system/libs/cart.php"; $regionid = intval$REQUEST'regionid'; //配送地区 $deliveryid = intval$REQUEST'deliveryid'; //配送方式 $accountmoney = floatval$REQUEST'accountmoney'; //余额 $ecvsn = $REQUEST'ecvsn'?$REQUEST'ecvsn':'';...