← Back

Shipment 100 Design Material Download System

shipment_100-design_material_download_system

Vendor: Shipment 100 Design Material Download System Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-29350
1Shipment 100 Design Material Download System Project
1Shipment 100 Design Material Download System
Jun 17, 2026
Apr 29, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/product_add.php.