3 matches found
CVE-2024-24027
SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists...
7.2CVSS7.8AI score0.00668EPSS
SaveExploits1References1
CVE-2024-24027
A SQL Injection vulnerability exists in Likeshop versions prior to 2.5.7 . The root cause is the improper neutralization of special elements used in an SQL command within the DistributionMemberLogic::getFansLists function. This flaw allows attackers to execute arbitrary SQL commands, potentially ...
7.2CVSS8.2AI score0.00668EPSS
SaveExploits1References1Affected Software1
20