Niushop B2b2c Multi-Business
6 CVEs affecting Niushop B2b2c Multi-Business. Latest disclosed: 2024-03-22. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-25247 | Critical | 9.8 | 2024-02-26 | SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude para… |
CVE-2024-25248 | Critical | 9.8 | 2024-02-26 | SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter. |
CVE-2024-28559 | High | 8.8 | 2024-03-22 | SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php… |
CVE-2018-14570 | High | 8.8 | 2018-07-23 | A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a… |
CVE-2024-0933 | Medium | 6.3 | 2024-01-26 | A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.ph… |
CVE-2024-28560 | Medium | 5.4 | 2024-03-22 | SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php comp… |