CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

CVE-2020-21394

The CVE-2020-21394 entry applies to Zhongbang CRMEB Mall System (open source) v2.60 and v3.1, where SQL injection is possible through the tablename parameter in SystemDatabackup.php. The underlying issue is a SQL injection vulnerability that can lead to unauthorized SQL commands with high impact ...

CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system with command execution vulnerabilities

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system there is a command execution vulnerability , attackers can...

iWebShop open source mall system SQL injection vulnerability

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . iWebShop open source mall system SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database...

Guangxi Guitian Energy Group Company Limited Guitian Gas Mall System Logic Flaw Vulnerability

Guangxi Guitian Energy Group Co., Ltd. is the main LPG comprehensive service enterprise in Guangxi. The products cover: service system, cylinder traceability system. It involves many industries such as gas station, LNG filling station, industrial gas station, chemical polymer new material...

Zhejiang WoSmith Information Technology Co., Ltd. WoSmith list store mall system file contains vulnerabilities

Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. Zhejiang WoSmith Information Technology Co., Ltd. WoSmith list store mall system file contains a vulnerability that can be exploited to obtain server privileges...

XML Entity Injection Vulnerability in oscshop2 Backend

oscshop2 is an open source free B2C mall system designed using thinkphp5, including micro-channel cell phone, follow the Apache2 open source agreement release. oscshop2 backend XML entity injection vulnerability exists . Attackers can use the vulnerability to obtain sensitive information...

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

Sql injection

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

CVE-2020-18020

PHPSHE Mall System v1.7 suffers an SQL injection in the user_phone parameter of admin.php, enabling remote attackers to execute arbitrary SQL and potentially compromise the system. Root cause: improper handling of input in the user_phone field. Impact notes: remote code execution is stated in the...

PHPSHE Mall System SQL注入漏洞

PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A security vulnerability exists in PHPSHE Mall System v1.7 that allows remote attacke...

SQL injection vulnerability in yershop mall system

yershop mall system is based on onethink content management framework, thinkphp3.2.3 new version of the comprehensive mall system. There is a SQL injection vulnerability in yershop mall system. An attacker can exploit this vulnerability to gain server privileges...

Zen Cart SQL Injection Vulnerability (CNVD-2021-22860)

Zen Cart is an open source, free shopping mall system , used to build a professional online store . An itrk-api.php rechtstextlanguage SQL injection vulnerability exists in the IT-Recht Kanzlei plugin in Zen Cart 1.5.6c. No details of the vulnerability are provided at this time...

SQL Injection Vulnerability in PHPSHE Mall System PC Version

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation and feedback and other functions, and provides easy to operate, practical features, quickly allow users to establish a personalized online store...

SQL Injection Vulnerability in Dascommerce Multi-User Mall System 2.0 Home Page

Large business creation multi-user mall system is mainly oriented to the high-end enterprise-level users, to create self-operated + investment in the e-commerce platform similar to the diversified business model of Jingdong, Tmall, the group purchase, e-commerce retail, wholesale in one, to help...

SQL Injection Vulnerability in Tesco Mall System

Tesco mall system for the majority of small and medium-sized enterprises to develop a professional-level e-commerce mall platform system. Ease2Shop Mall system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

ShopsN open source mall system co***_ac*** function SQL injection vulnerabilities exist

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system coac function exists SQL...

SQL Injection Vulnerability in Dascommerce Mall System v2.0 Frontend

Big business mall system is a business creation network based on ten years of reconstruction of the e-commerce architecture, to create a set of operators, suppliers, purchasers, user distribution, etc., in the PC and mobile devices can be compatible with the operation of a complete set of offline...