SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18164
Reference (s):
- https://xz.aliyun.com/t/5095
Get a Pentest and security assessment of your IT network.
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18164
Reference (s):