CVE-2019-19113

main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall aka New Bee before 2019-10-23 allows search?goodsCategoryId=&keyword= SQL Injection...

PT-2019-15770

Name of the Vulnerable Software and Affected Versions newbee-mall aka New Bee versions prior to 2019-10-23 Description The issue allows for SQL Injection through the search?goodsCategoryId=&keyword= endpoint in the NewBeeMallGoodsMapper.xml file. Recommendations For versions prior to 2019-10-23,...

CVE-2019-19113: Improper Neutralization of Special Elements used in an SQL Command

main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall aka New Bee before 2019-10-23 allows search?goodsCategoryId=&keyword= SQL Injection...