| タイトル | https://www.jiujiujia.net/ PHP-based Three-Dot Ordering System Vulnerable to SQL Injection lasest SQL Injection |
|---|
| 説明 | The three-hook ordering system is a mini-program mall built
based on thinkphp8+element-plus+uniapp, designed for
developers to facilitate secondary development or direct
use. It can be published on multiple platforms, including
WeChat Mini Programs, WeChat Official Accounts, QQ Mini
Programs, Alipay Mini Programs, ByteDance Mini Programs,
Baidu Mini Programs, Android, and iOS. In terms of
implementation, a certain interface of the system directly
concatenates user input into SQL query statements, allowing
attackers to exploit this vulnerability to obtain sensitive
database information. |
|---|
| ソース | ⚠️ http://x.x.x.x:38765/qwertyuiop/qwsdfvbnm/1/vuldb/JJJshop/EnglishVers%E4%B8%89%E5%8B%BE%E7%82%B9%E9%A4%90%E7%B3%BB%E7%BB%9FPHP%E7%89%88%E5%AD%98%E5%9C%A8product.category.indexSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.pdf |
|---|
| ユーザー | BadKitty (UID 90804) |
|---|
| 送信 | 2026年01月03日 08:21 (9 月 ago) |
|---|
| モデレーション | 2026年01月10日 11:02 (7 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 340443 [jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food 迄 20260103 index latitude SQLインジェクション] |
|---|
| ポイント | 20 |
|---|