| 제목 | codeastro Ecommerce Site 1 SQL Injection |
|---|
| 설명 | Vendor:
https://codeastro.com/
Software:
https://codeastro.com/ecommerce-site-in-php-with-source-code/
Take a look at action.php, the param was connected to the SQL query directly.It's not filtered or checked
|
|---|
| 원천 | ⚠️ https://docs.qq.com/doc/DYklCV0thWnRaaWpY |
|---|
| 사용자 | Mooooon (UID 61604) |
|---|
| 제출 | 2024. 03. 08. AM 07:59 (3 연령 ago) |
|---|
| 모더레이션 | 2024. 03. 09. AM 07:53 (24 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 256303 [CodeAstro Ecommerce Site 1.0 Search action.php cat_id/brand_id/keyword SQL 주입] |
|---|
| 포인트들 | 16 |
|---|