Sql injection

In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/productadmin.class.php via the admin/?n=product&c=productadmin&a=dopara&apptype=shop id parameter...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system Shopid parameter, ajaxshopinfo method SQL injection vulnerability exists because the system fails to strictly filter the parameters provided by t...

PT-2017-15224

Name of the Vulnerable Software and Affected Versions SOY CMS versions 1.8.1 through 1.8.12 Description A directory traversal issue allows authenticated attackers to read arbitrary files by manipulating the shop id variable. Recommendations For SOY CMS versions 1.8.1 through 1.8.12, consider...