SQL Injection Vulnerability in ECTS Education CMS /BlogManage/Friend/FindFriendsForInCircle.aspx Page of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. There is a SQL injection vulnerability in this product, which can be exploited to obtain database information after a...