SQL Injection vulnerability in ECshop 4.x allows an attacker to obtain sensitive information via the file/article.php component.