critical9.8
CVE-2020-22204
SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php.
Impact
SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shopex | Ecshop | Version 2.7.6 |