SQL Injection and Cross-site Scripting Vulnerabilities in Yitianlian's Enterprise Website Builder

Shenzhen Yitianlian Technology Co., Ltd. is a network operator providing online marketing services for enterprises. SQL injection and cross-site scripting vulnerabilities exist in the about.php and list.php parameters of the Yitianlian website builder system, which can be exploited by an attacker...