CVE-2024-25247

SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters...

CVE-2024-25247

The Niushop B2B2C V5 e-commerce system is vulnerable to a SQL Injection flaw in the /app/api/controller/Store.php component. The root cause is the improper neutralization of special elements, which allows attackers to execute arbitrary SQL commands by manipulating the latitude and longitude param...