ECShop2. 5. x&2.6. x injection exploit-vulnerability warning-the black bar safety net

ECShop2. 5. x&2.6. x goodsscript.php no initialization SQL, leading to injection vulnerabilities Effect 2. 5. x and 2. 6. x,other versions not tested goodsscript. php44 line:injection / admin credentials disclosure exploit if emptyempty$GET'type' ... elseif $GET'type' == 'collection' ... $sql .=...

ECShop injection vulnerability-vulnerability warning-the black bar safety net

Author: Ryat 2009-03-24 Effect 2. 5. x and 2. 6. x,other versions not tested goodsscript. php44 line: if empty$GET'type' ... elseif $GET'type' == 'collection' ... $sql .= "LIMIT" . ! empty$GET'goodsnum' ? intval$GET'goodsnum' : 1 0; $res = $db-query$sql; $sql is not initialized,obviously a bug:...