| タイトル | 7-card Fakabao ≤v1.0_build20230805 SQL Injection |
|---|
| 説明 | The 7-card Fakabao application, specifically in version ≤v1.0_build20230805, has a SQL injection vulnerability in the file shop/wxpay_notify.php. This issue arises from the parameter out_trade_no being directly combined into the SQL query, which potentially allows for SQL injection attacks.
Once the WeChat pay channel is enabled, an attacker could use a tool like Postman to send a sleep query to it, thereby confirming the SQL injection vulnerability. An example of such a query would be:
GET /shop/notify.php?out_trade_no=1'='2' or sleep(5);%23 HTTP/1.1
Host: fakabao.lab.wetolink.com
Cookie: PHPSESSID=eohle1e8v1rfp9d4o46b1puht4
The vendor, available at https://www.7-card.cn/, has been notified about this vulnerability. As of the time of this report, users are advised to update their software to the latest version or implement other protective measures to mitigate this risk. |
|---|
| ソース | ⚠️ https://note.zhaoj.in/share/mqHZlle8Pcg8 |
|---|
| ユーザー | glzjin (UID 59815) |
|---|
| 送信 | 2023年12月22日 16:54 (3 年 ago) |
|---|
| モデレーション | 2023年12月30日 17:38 (8 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 249387 [7-card Fakabao 迄 1.0_build20230805 shop/wxpay_notify.php out_trade_no SQLインジェクション] |
|---|
| ポイント | 20 |
|---|