CVE-2024-25248

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

niushop b2b2c SQL Injection Vulnerability

Niushop niushop b2b2c is a PHP open source e-commerce multi-merchant system from China's NiuKu Information Technology Niushop. niushop b2b2c V5 version exists SQL injection vulnerability , the vulnerability stems from the orderGoodsDelivery function in the presence of SQL injection , allowing an...

PT-2024-20843 · Unknown · Niushop B2B2C

Name of the Vulnerable Software and Affected Versions: Niushop B2B2C V5 Description: The issue concerns a SQL Injection vulnerability in the orderGoodsDelivery function, allowing attackers to execute arbitrary SQL commands via the order id parameter. Recommendations: For Niushop B2B2C V5, as a...