Shipment 100 Design Material Download System Project
shipment_100-design_material_download_system_project
1 CVE • 1 product
Products (1)
Click to collapseToggle
Products (1)
Click to collapse
CVEs (1)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Shipment 100 Design Material Download System Project 1Shipment 100 Design Material Download System Jun 17, 2026 Apr 29, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/product_add.php. |