Niushop

10 CVEs across 3 Niushop products. Browse Niushop vulnerabilities, severities, and proof-of-concept exploits.

Niushop products with known CVEs

ProductCVEs
B2b2c Multi-Business6
Niushop4
B2b2c1
Niushop CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-28560Medium5.42024-03-22SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php comp…
CVE-2024-28559High8.82024-03-22SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php…
CVE-2024-25247Critical9.82024-02-26SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude para…
CVE-2024-25248Critical9.82024-02-26SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.
CVE-2024-0933Medium6.32024-01-26A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.ph…
CVE-2020-19672Critical9.82020-09-30Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the…
CVE-2020-19670Medium4.92020-09-30In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.
CVE-2019-16311High8.82019-09-14NIUSHOP V1.11 has CSRF via search_info to index.php.
CVE-2019-16310Medium5.42019-09-14NIUSHOP V1.11 has XSS via the index.php?s=/admin URI.
CVE-2018-14570High8.82018-07-23A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a…