CVE:CVE-2018-5986
CNNVD:CNNVD-201801-926
Easy Car Script是一套在线汽车分类展示脚本。
Easy Car Script 2014版本中存在SQL注入漏洞。远程攻击者可通过向site_search.php文件发送‘s_order’或‘s_row’参数利用该漏洞注入SQL命令。
solution:Upgrade easycarscript easycarscript to a higher version than 2014,and avoid the version 2014