CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

CVE-2024-28559

CVE-2024-28559/Security issue in Niushop B2B2C (v5.3.3 and earlier) is a SQL injection in the setPrice() function of Goodsbatchset.php, enabling privilege escalation. Documented impact includes high severity (CVSSv3.1: 8.8, Network vector, Privileges Required: Low, User Interaction: None, Confide...