A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9762
Reference (s):
- https://gitee.com/koyshe/phpshe/issues/ITC0C