EasySNS Minimalist Community getusertopic method and index method have SQL injection vulnerability

EasySNS Minimalist Community Group Edition is a new database architecture and program structure to form an interactive community with a group as the basic unit. EasySNS Minimalist Community getusertopic method and index method has a SQL injection vulnerability, the vulnerability is due to the...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C Multi-User Mall System v2.1.3 SQL injection vulnerability exists in the address and index methods, due to the system fails to filter user-supplied parameters. An attack...