Sql injection

PHPSHE 1.7 allows module/index/cart.php pintuanid SQL Injection to index.php...

CVE-2019-9626: Improper Neutralization of Special Elements used in an SQL Command

PHPSHE 1.7 allows module/index/cart.php pintuanid SQL Injection to index.php...

PT-2019-19762

Name of the Vulnerable Software and Affected Versions PHPSHE version 1.7 Description The issue allows for SQL Injection in the pintuan id parameter to the /index.php endpoint via the module/index/cart.php file. Recommendations For PHPSHE version 1.7, consider restricting access to the cart.php...