CVE:CVE-2019-9063
CNNVD:CNNVD-201902-876
PHP Scripts Mall Auction website script是印度PHP Scripts Mall公司的一套在线拍卖网站系统。
PHP Scripts Mall Auction website script 2.0.4版本中存在安全漏洞。攻击者可利用该漏洞修改支付的金额。
solution:Upgrade auction_website_script_project auction_website_script to a higher version than 2.0.4,and avoid the version 2.0.4