CVE-2024-28559

Niushop B2B2C versions 5.3.3 and earlier are vulnerable to an SQL injection (CWE-89) in the Goodsbatchset.php component. Specifically, the setPrice() function fails to properly neutralize special elements used in SQL commands, allowing an attacker to escalate privileges and potentially gain unaut...

CVE-2024-28559: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...