SHOPEX 4.8.5 mdl.goods.php SQL注入漏洞

漏洞核心函数 \core\modelv5\trading\mdl.goods.php codepublic function getProducts $gid, $pid = 0 $sqlWhere = ""; if 0 $pid $sqlWhere = " AND A.productid = ".$pid; //www.lpboke.com 没过滤 $sql = "SELECT A.,B.imagedefault FROM sdbproducts AS A LEFT JOIN sdbgoods AS B ON A.goodsid=B.goodsid WHERE...

shopex 4.8.5 /core/model_v5/trading/mdl.goods.php SQL注入漏洞

No description provided by source...