CVE-2019-9762

A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pay.php with the parameter id. The vulnerability does not need any authentication.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-03-14

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Phpshe (Phpshe)

References

• https://gitee.com/koyshe/phpshe/issues/ITC0C