Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Shipment 100-design Material Download System Project Clear all filters
TI-2021-10103 CVE-2021-29350 · GHSA-v4qv-9qrx-24c7

SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows…

Priority LOW 34

SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/product_add.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01308 Published 2021-04-29 No fix listed CWE-89