CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

CVE-2024-28559

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component...

PT-2024-22462 · Unknown · Niushop B2B2C

Name of the Vulnerable Software and Affected Versions: Niushop B2B2C versions 5.3.3 and earlier Description: A SQL injection issue allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component. The vulnerability is critical and can be exploited to gain...