Remote Code Execution Vulnerability in ECShop Backend

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. A remote code execution vulnerability exists ...

ecshop后台弱权限sql注入一枚

简要描述： ecshop后台弱权限sql注入一枚 详细说明： PS:默认安装如果选择了安装测试数据就会多出2个帐号。本文再次从这两个帐号开始！ 漏洞发生在 admin/affiliateck.php 行29 if $REQUEST'act' == 'list' $logdb = getaffiliateck; .... 这里没有权限检查 然后移步到 方法getaffiliateck 224行有惊喜 if isset$GET'auid' $sqladd = ' AND a.userid=' . $GET'auid'; 未过滤的INT型注入。。。 就不多讲了 上代码...