EUVD-2022-42454

Malicious code in bioql PyPI...

EUVD-2023-47941

Malicious code in bioql PyPI...

EUVD-2023-57650

Malicious code in bioql PyPI...

EUVD-2022-4457

Malicious code in bioql PyPI...

EUVD-2025-7992

Malicious code in bioql PyPI...

EUVD-2022-7126

Malicious code in bioql PyPI...

EUVD-2025-3740

Malicious code in bioql PyPI...

EUVD-2024-2184

Malicious code in bioql PyPI...

EUVD-2024-19713

Malicious code in bioql PyPI...

EUVD-2024-51984

Malicious code in bioql PyPI...

EUVD-2024-19496

Malicious code in bioql PyPI...

EUVD-2023-43823

Malicious code in bioql PyPI...

EUVD-2024-32779

Malicious code in bioql PyPI...

EUVD-2022-27652

Malicious code in bioql PyPI...

EUVD-2021-7692

Malicious code in bioql PyPI...

EUVD-2022-40729

Malicious code in bioql PyPI...

EUVD-2022-31201

Malicious code in bioql PyPI...

EUVD-2025-6690

Malicious code in bioql PyPI...

EUVD-2022-53428

Malicious code in bioql PyPI...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...