SQL injection vulnerability in yershop mall system

yershop mall system is based on onethink content management framework, thinkphp3.2.3 new version of the comprehensive mall system. There is a SQL injection vulnerability in yershop mall system. An attacker can exploit this vulnerability to gain server privileges...