EUVD-2009-1617

Malware in sbrugna...

Sql injection

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action...

CVE-2009-1622

SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action...

ECShop 2.5.0 (order_sn) Remote SQL Injection Vulnerability

ecshop2.5.0 user.php存在sql注入漏洞 user.php 2176行： else if $action == 'orderquery' $ordersn = empty$GET'ordersn' ? '' : trimsubstr$GET'ordersn', 1; includeonceROOTPATH .'includes/clsjson.php'; $json = new JSON; $result = array'error'=0, 'message'='', 'content'=''; ifisset$SESSION'lastorderquery' iftim...