Lucene search
+L

2 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:36 a.m.•29 views

CVE-2024-34949

SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint...

8.2CVSS8.1AI score0.0042EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/20 12:00 a.m.•1 views

CVE-2024-34949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint...

8.2CVSS5.8AI score0.0042EPSS
SaveExploits1References1
Rows per page
Query Builder