ecshop3.x 代码执行

2022-06-20 SHOP++ PoC No

Description

问题发生在user.php的display函数,模版变量可控,导致注入,配合注入可达到远程代码执行

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities