CVE:CVE-2017-17873
CNNVD:CNNVD-201712-1008
Vanguard Marketplace Digital Products PHP是一套基于PHP的MP3等数字文件在线交易网站脚本。
Vanguard Marketplace Digital Products PHP 1.4版本中存在SQL注入漏洞。远程攻击者可通过向/p URI发送PATH_INFO利用该漏洞注入SQL命令。
solution:Upgrade vanguard_project marketplace_digital_products_php to a higher version than 1.4.0,and avoid the version 1.4.0