| عنوان | codeastro Ecommerce Site 1 SQL Injection |
|---|
| الوصف | Vendor:
https://codeastro.com/
Software:
https://codeastro.com/ecommerce-site-in-php-with-source-code/
Take a look at action.php, the param was connected to the SQL query directly.It's not filtered or checked
|
|---|
| المصدر | ⚠️ https://docs.qq.com/doc/DYklCV0thWnRaaWpY |
|---|
| المستخدم | Mooooon (UID 61604) |
|---|
| ارسال | 08/03/2024 07:59 AM (2 سنوات منذ) |
|---|
| الاعتدال | 09/03/2024 07:53 AM (24 hours later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 256303 [CodeAstro Ecommerce Site 1.0 Search action.php cat_id/brand_id/keyword حقن SQL] |
|---|
| النقاط | 16 |
|---|