CVE:CVE-2023-3984
CNNVD:CNNVD-202307-2185
RecipePoint是phpscriptpoint团队的一个 SaaS 多供应商配方平台。
phpscriptpoint RecipePoint 1.9版本存在SQL注入漏洞，该漏洞源于文件/recipe-result的参数text/category/type/difficulty/cuisine/cooking_method会导致sql注入。
solution:Upgrade phpscriptpoint recipepoint to a higher version than 1.9,and avoid the version 1.9