漏洞描述
禾匠商城是一个php开发的小程序商城系统,禾匠榜店商城 store-list 模块存在sql漏洞，攻击者可以构造恶意sql语句获取数据库信息。
禾匠榜店商城 store-list 模块存在sql漏洞
PoC代码
暂无相关漏洞推荐
- SRM智联云采系统 restore 远程代码执行漏洞
- 智联云采 SRM2.0 restore 存在远程命令执行漏洞
- 索贝融媒体 /sobey-mchEditor/mch/WXArticleInt/restore SQL注入漏洞
- Atlassian Confluence /json/setup-restore.action 文件上传漏洞（CVE-2023-22518）
- POC CVE-2010-5286: Joomla! Component Jstore - 'Controller' Local File Inclusion
- POC CVE-2020-36112: CSE Bookstore 1.0 - SQL Injection
- POC CVE-2020-36365: Smartstore <4.1.0 - Open Redirect
- POC CVE-2024-12209: WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion
- POC CVE-2024-21136: Oracle Retail Xstore Suite - Pre-authenticated Path Traversal
- POC gcloud-filestore-deletion-protection-disabled: Filestore Instance Deletion Protection Not Enabled
- POC gcloud-filestore-no-backups: Filestore Instance Not Using On-Demand Backup
- POC gcloud-filestore-no-cmek: Filestore Instance Not Using Customer-Managed Encryption Keys
- POC gcloud-filestore-no-vpc-controls: Filestore Instance Not Protected by VPC Service Controls