PHPSHE 1.7 has SQL injection via the admin.php?mod=product&act=state product_id[] parameter.

Published Jan 23, 2019 · Updated Aug 4, 2024 · Assigned by mitre