← Back

Shipment 100 Design Material Download System Project

shipment_100-design_material_download_system_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Shipment 100 Design Material Download System Project
1Shipment 100 Design Material Download System
Jun 17, 2026
Apr 29, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/product_add.php.