3 matches found
CVE-2020-20675
Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...
9.8CVSS8AI score0.01133EPSS
SaveExploits1
Sql injection
Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...
7.5CVSS9.7AI score0.01133EPSS
SaveExploits1References1Affected Software1
CVE-2020-20675
Nuishop v2.3 is affected by an SQL injection in /goods/getGoodsListByConditions/. The vulnerability is caused by unsafely handling input in that endpoint, enabling attackers to manipulate database queries. Documented impact indicates high severity (CVSS 3.1: CRITICAL, 9.8) and high for confidenti...
9.8CVSS9.7AI score0.01133EPSS
SaveExploits1References1Affected Software1
20