| 标题 | https://www.jiujiujia.net/ PHP-based Three-Dot Ordering System Vulnerable to SQL Injection lasest SQL Injection |
|---|
| 描述 | The three-hook ordering system is a mini-program mall built
based on thinkphp8+element-plus+uniapp, designed for
developers to facilitate secondary development or direct
use. It can be published on multiple platforms, including
WeChat Mini Programs, WeChat Official Accounts, QQ Mini
Programs, Alipay Mini Programs, ByteDance Mini Programs,
Baidu Mini Programs, Android, and iOS. In terms of
implementation, a certain interface of the system directly
concatenates user input into SQL query statements, allowing
attackers to exploit this vulnerability to obtain sensitive
database information. |
|---|
| 来源 | ⚠️ http://x.x.x.x:38765/qwertyuiop/qwsdfvbnm/1/vuldb/JJJshop/EnglishVers%E4%B8%89%E5%8B%BE%E7%82%B9%E9%A4%90%E7%B3%BB%E7%BB%9FPHP%E7%89%88%E5%AD%98%E5%9C%A8product.category.indexSQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.pdf |
|---|
| 用户 | BadKitty (UID 90804) |
|---|
| 提交 | 2026-01-03 08時21分 (9 月前) |
|---|
| 管理 | 2026-01-10 11時02分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 340443 [jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food 直到 20260103 index latitude SQL注入] |
|---|
| 积分 | 20 |
|---|