CVE-2020-18144

概要

参考情報

• yundiao/ectouch · Exploit

ectouch のその他の脆弱性

• CVE-2023-39560緊急 9.8ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.
• CVE-2022-25098緊急 9.1ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.
• CVE-2020-21806緊急 9.8SQL Injection Vulnerability in ECTouch v2 via the shop page in index.php..