CVE-2024-24027

2024-02-2700:00:00

mitre

github.com

sql injection

likeshop

distributionmemberlogic

AI Score

8.3

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:likeshop:likeshop:*:*:*:*:*:*:*:*"
    ],
    "vendor": "likeshop",
    "product": "likeshop",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.5.7",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]