CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

CVE-2024-28559

Niushop B2B2C versions 5.3.3 and earlier are susceptible to a SQL injection vulnerability within the Goodsbatchset.php component's setPrice() function. This flaw allows an attacker to escalate privileges and gain unauthorized access to the system. The vulnerability is specifically noted to be exp...