PT-2021-10138

Name of the Vulnerable Software and Affected Versions: ECTouch version v2 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the integral min parameter in the "index.php" endpoint. Recommendations: For ECTouch version v2, avoid using the integral min...

ECTouch SQL Injection Vulnerability

ECTouch is an application. An open source mobile mall system to create an enterprise exclusive mobile mall. ECTouch suffers from a SQL injection vulnerability, which originates from the SQL injection vulnerability in ECTouch v2 generated through the integralmin parameter in index.php. An attacker...