4 matches found
CVE-2024-28559
SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...
CVE-2024-28559: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...
CVE-2024-28559
Niushop B2B2C versions 5.3.3 and earlier are vulnerable to an SQL injection (CWE-89) in the Goodsbatchset.php component. Specifically, the setPrice() function fails to properly neutralize special elements used in SQL commands, allowing an attacker to escalate privileges and potentially gain unaut...
