CVE-2018-15918: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Jorani 0.6.5. SQL Injection error-based allows a user of the application without permissions to read and modify sensitive information from the database used by the application via the startdate or enddate parameter to leaves/validate...

wstmall open source mall system endDate parameter SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, is a system that can help companies and individuals to quickly build a community service system. wstmall open source mall system endDate parameter SQL injection vulnerability , due to the system...