EUVD-2023-34314

Malicious code in bioql PyPI...

EUVD-2025-10607

Malicious code in bioql PyPI...

EUVD-2024-36651

Malicious code in bioql PyPI...

EUVD-2025-15767

Malicious code in bioql PyPI...

EUVD-2024-46000

Malicious code in bioql PyPI...

EUVD-2024-44942

Malicious code in bioql PyPI...

EUVD-2024-43517

Malicious code in bioql PyPI...

EUVD-2024-45549

Malicious code in bioql PyPI...

EUVD-2024-45868

Malicious code in bioql PyPI...

EUVD-2024-43389

Malicious code in bioql PyPI...

EUVD-2025-28055

Malicious code in bioql PyPI...

EUVD-2025-28109

Malicious code in bioql PyPI...

EUVD-2024-45548

Malicious code in bioql PyPI...

EUVD-2024-45886

Malicious code in bioql PyPI...

EUVD-2024-43527

Malicious code in bioql PyPI...

EUVD-2024-52492

Malicious code in bioql PyPI...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

PT-2025-40400

Name of the Vulnerable Software and Affected Versions YOSHOP version 2.0 Description The software is susceptible to an unauthenticated SQL injection through the goodsIds parameter of the /api/goods/listByIds API endpoint. The getListByIds function improperly concatenates user-supplied input into ...