CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

CVE-2024-31025

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...

CVE-2024-31025

The ShopeX ECShop open source mall system (versions 4.x ) is vulnerable to a SQL Injection vulnerability in the file/article.php component. The root cause is a lack of external input SQL statement validation, which allows an attacker to manipulate database queries. Successful exploitation enables...

CVE-2024-31025: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component...