Lucene search
+L

72 matches found

CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•21 views

Suishang Enterprise-Level B2B2C Multi-User Mall System 安全漏洞

Suishang Enterprise-Level B2B2C Multi-User Mall System is an e-commerce system software from China Suishang Company. A security vulnerability exists in Suishang Enterprise-Level B2B2C Multi-User Mall System version 1.0, which originates from the incorrect operation of the parameter keywords in th...

5.3CVSS4.6AI score0.00348EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•5 views

CVE-2025-12289: Improper Neutralization of Input During Web Page Generation

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activitystate/1/categoryid/1001. Executing manipulation of the argument categoryid can lead to...

5.3CVSS3.9AI score0.00348EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•3 views

CVE-2025-12290: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible t...

5.3CVSS3.9AI score0.00348EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•23 views

EUVD-2018-6479

Malware in sbrugna...

8.8CVSS7.8AI score0.01765EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2020-11573

Malware in sbrugna...

4.9CVSS5.7AI score0.00872EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•26 views

EUVD-2024-16714

Malicious code in bioql PyPI...

9.8CVSS7AI score0.0058EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/05/23 10:01 a.m.•26 views

CVE-2024-28560

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea function of the Address.php component...

5.4CVSS8.2AI score0.00459EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:46 a.m.•14 views

CVE-2024-25248

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

9.8CVSS8.3AI score0.00628EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:45 a.m.•18 views

CVE-2024-25247

SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters...

9.8CVSS9.9AI score0.00628EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:34 a.m.•16 views

CVE-2024-0933

A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and ma...

9.8CVSS6.8AI score0.0058EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:17 p.m.•15 views

CVE-2020-19670

In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords...

4.9CVSS7.2AI score0.00872EPSS
SaveExploits1
OSV
OSV
•added 2024/03/22 12:15 p.m.•16 views

CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

8.8CVSS5.8AI score0.00808EPSS
SaveExploits2References5
NVD
NVD
•added 2024/03/22 12:15 p.m.•33 views

CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

8.8CVSS7.7AI score0.00808EPSS
SaveExploits1References5
NVD
NVD
•added 2024/03/22 12:15 p.m.•40 views

CVE-2024-28560

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea function of the Address.php component...

5.4CVSS7.7AI score0.00459EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/03/22 12:00 a.m.•21 views

PT-2024-22462 · Unknown · Niushop B2B2C

Name of the Vulnerable Software and Affected Versions: Niushop B2B2C versions 5.3.3 and earlier Description: A SQL injection issue allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component. The vulnerability is critical and can be exploited to gain...

8.8CVSS7.6AI score0.00808EPSS
SaveExploits2References10
Vulnrichment
Vulnrichment
•added 2024/03/22 12:00 a.m.•17 views

CVE-2024-28560

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea function of the Address.php component...

8.1AI score0.00459EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/03/22 12:00 a.m.•46 views

CVE-2024-28560

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea function of the Address.php component...

8AI score0.00459EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/22 12:00 a.m.•2 views

CVE-2024-28560: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea function of the Address.php component...

5.4CVSS5.9AI score0.00459EPSS
SaveExploits1References2
CVE
CVE
•added 2024/03/22 12:00 a.m.•93 views

CVE-2024-28560

Niushop B2B2C versions 5.3.3 and earlier are susceptible to a SQL injection vulnerability. This flaw exists in the deleteArea() function of the Address.php component, allowing an attacker to escalate privileges . Additionally, the setPrice() function in the Goodsbatchset.php component is also aff...

5.4CVSS8.1AI score0.00459EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2024/03/22 12:00 a.m.•20 views

Niushop B2B2C 安全漏洞

Niushop niushop b2b2c is a PHP open source e-commerce multi-merchant system from China Niukoo Information Technology Niushop. A security vulnerability exists in Niushop B2B2C v.5.3.3 and earlier versions. An attacker exploited the vulnerability to extract power via the setPrice function of the...

8.8CVSS6.4AI score0.00808EPSS
SaveExploits2References6
Rows per page
Query Builder