CVE:CVE-2017-17592
CNNVD:CNNVD-201712-550
Website Auction Marketplace是一款用于创建电子商务网站的软件。
Website Auction Marketplace 2.0.5版本中存在SQL注入漏洞。远程攻击者可通过向search.php文件发送‘cat_id’参数利用该漏洞注入SQL命令。
solution:Upgrade website_auction_marketplace_project website_auction_marketplace to a higher version than 2.0.5,and avoid the version 2.0.5