CVE-2020-21806

Description

References

• ectouch/ectouch · Exploit

ectouch의 다른 취약점

• CVE-2023-39560심각 9.8ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr['id'] parameter at \default\helpers\insert.php.
• CVE-2022-25098심각 9.1ECTouch v2 suffers from arbitrary file deletion due to insufficient filtering of the filename parameter.
• CVE-2020-18144심각 9.8SQL Injection Vulnerability in ECTouch v2 via the integral_min parameter in index.php.