| Название | geeeeeeeek dingfanzu master SQL Injection |
|---|
| Описание | dingfanzu-CMS loadShopInfo.php shopId SQL inject
THis is a food delivery website based on php, including front end and back end
dingfanzu MS does not filter the content correctly at the "loadShopInfo.php" shopId parameter, resulting in the generation of SQL injection.
For details, please see the github document:
https://github.com/XinCaoZ/cve/blob/main/dingfanzu/dingfanzu-CMS%20loadShopInfo.php%20shopId%20SQL%20inject.md
|
|---|
| Источник | ⚠️ https://github.com/XinCaoZ/cve/blob/main/dingfanzu/dingfanzu-CMS%20loadShopInfo.php%20shopId%20SQL%20inject.md |
|---|
| Пользователь | Xinca0 (UID 43189) |
|---|
| Представление | 10.02.2025 07:30 (1 Год назад) |
|---|
| Модерация | 21.02.2025 10:53 (11 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 296490 [dingfanzu CMS до 20250210 /ajax/loadShopInfo.php shopId SQL-инъекция] |
|---|
| Баллы | 20 |
|---|