CVE-2020-22204

SQL Injection in ECShop 2.7.6 via the goodsnumber parameter to flow.php...

PT-2021-10747

Name of the Vulnerable Software and Affected Versions ECShop version 2.7.6 Description The issue is related to SQL Injection via the goods number parameter to the "flow.php" endpoint. This allows for potential exploitation. Recommendations For ECShop version 2.7.6, avoid using the goods number...