CVE:CVE-2015-7784
CNNVD:CNNVD-201512-192
基于EC-CUBE平台的BOKUBLOCK BbAdminViewsControl213插件1.0及之前版本和BbAdminViewsControl插件2.0及之前版本中存在SQL注入漏洞。远程攻击者可利用该漏洞执行任意SQL命令。
solution:Upgrade bokublock bbadminviewscontrol to a higher version than 2.0,and avoid the version (,2.0]; Upgrade bokublock bbadminviewscontrol213 to a higher version than 1.0,and avoid the version (,1.0]