CVE-2020-20675

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...

Sql injection

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...

CVE-2020-20675

Nuishop v2.3 is affected by an SQL injection in /goods/getGoodsListByConditions/. The vulnerability is caused by unsafely handling input in that endpoint, enabling attackers to manipulate database queries. Documented impact indicates high severity (CVSS 3.1: CRITICAL, 9.8) and high for confidenti...

CVE-2020-20675: Improper Neutralization of Special Elements used in an SQL Command

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/...

PT-2021-10530

Name of the Vulnerable Software and Affected Versions: Nuishop version 2.3 Description: The issue is a SQL injection vulnerability located in the /goods/getGoodsListByConditions/ endpoint. This vulnerability can potentially be exploited to extract or modify sensitive data from the database...