Description
ECTouch是一款开源的微信小程序，为中小企业提供零售解决方案。ECTouch电商系统存在SQL注入，未经身份验证的攻击者可以获取到数据库的敏感信息
ECTouch电商微信小程序 /index.php SQL 注入漏洞（CVE-2023-39560）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.csdn.net/qq_48609816/article/details/125137259
https://www.ddpoc.com/DVB-2023-5128.html
https://stack.chaitin.com/vuldb/detail/4fb9d1fc-4c4f-4e67-868b-9b279e9d0248
https://cve.imfht.com/poc_detail/9055b2e3e7535ea8d4c8709fb8e5827990d6edf8
https://zone.ci/aliyun/ali_nvd/21489.html
https://m.10100.com/article/132812385