9 matches found
CVE-2026-75498
Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'boquery' parameter in the 'Address.php' file. Fixed in 123c97c...
CVE-2026-75498
Webkul QloApps is susceptible to SQL injection due to missing validation of request parameters before a database query. A remote attacker with administrative privileges can inject a crafted SQL query via the bo_query parameter in the Address.php file. The flaw allows high impact on confidentialit...
EUVD-2026-65588
Webkul QloApps does not validate request parameters before a database query. A remote, authenticated attacker with administrative privileges could send a crafted SQL query to the 'boquery' parameter in the 'Address.php' file. Fixed in 123c97c...
CVE-2024-28560
SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea function of the Address.php component...
CVE-2024-28560
Affected product : Niushop B2B2C, all versions up to 5.3.3. Vulnerability : SQL injection in Niushop B2B2C, enabling privilege escalation via functions in Address.php (deleteArea()) and, per several sources, also via Goodsbatchset.php (setPrice()). Root cause : Improper handling of user-supplied ...
CVE-2024-28560
SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea function of the Address.php component...
Niushop B2B2C 安全漏洞
Niushop niushop b2b2c is a PHP open source e-commerce multi-merchant system from China Niukoo Information Technology Niushop. A security vulnerability exists in Niushop B2B2C v.5.3.3 and earlier versions. An attacker exploited the vulnerability to extract power via the deleteArea function of the...
