CVE-2023-5294: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order.php. The manipulation of the argument goodsid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

ECShop Search.php SQL Injection Exploit

Exploit for php platform in category web applications ======================================= ECShop Search.php SQL Injection Exploit ======================================= Author: Jannock Software Link: http://www.ecshop.com Version: ECShop All Version Tested on: CVE : WAVDB: WAVDB-01606 Code :...