ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.