Arbitrary code execution vulnerability in Shield Spirit public number promotion system setup.php page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. An arbitrary code execution vulnerability exists in the setup.php page of the Shield Spirit Public Promotion System. Allow attackers to exploit the vulnerability to directly execute code...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System reg.php Page

Shield Spirit Public Promotion System is a product that is mainly applied to public promotion alliance. A SQL injection vulnerability exists in the username parameter of the Shield Spirit public number promotion system \php\reg.php page. An attacker can exploit the vulnerability to obtain sensiti...

Shield Spirit Public Promotion System setup.php has a reinstallation vulnerability

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. A reinstallation vulnerability exists in Shield Spirit Public Promotion System setup.php. As the program fails to validate the installation, an attacker can reinstall the system by exploiting the...

SQL Injection Vulnerability in Shield Spirit Public Number Promotion System Login.php

Shield Spirit public number promotion system is mainly applied to public number promotion affiliate. A SQL injection vulnerability exists in the login.php of the Shield Spirit public number promotion system. Since the username variable in the statement gets data directly from post, it allows...