Ectouch · Ectouch · CVE-2020-21806
Name of the Vulnerable Software and Affected Versions:
ECTouch version v2
Description:
The issue is related to a SQL injection vulnerability in the shop page of index.php. This vulnerability can be exploited via the shop page in index.php.
Recommendations:
For ECTouch version v2, consider restricting access to the shop page in index.php until a patch is available. As a temporary workaround, avoid using user-inputted data in SQL queries to minimize the risk of exploitation.