CyberRota Analysis
AI-GeneratedAojiaoZero Antaris 1.0 is vulnerable to SQL injection through the _rewardPurchase function in the /ipn.php file, specifically via manipulation of the item_number argument. This vulnerability allows remote attackers to execute arbitrary SQL queries, potentially compromising the integrity of the database. Organizations using this software should prioritize remediation to mitigate the risk of data breaches and unauthorized access.
Original NVD Description
A vulnerability was detected in AojiaoZero Antaris 1.0. This affects the function _rewardPurchase of the file /ipn.php of the component PayPal IPN Payment Handler. The manipulation of the argument item_number results in sql injection. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.