ecshop SQL Injection Vulnerability (CNVD-2021-95249)

ECShop is an open source mall system from Business School. Support PC H5 APP small program mall, source code free download experience, suitable for enterprise development build mall. ecshop in v2.7.3 version there is a SQL injection vulnerability, the vulnerability stems from ecshop database based applications lack of validation of external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands.