critical9.8
CVE-2020-18164
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
Impact
SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tp-Shop | Tp-Shop | from 2.0.5 through 3.0.0 |