Niushop

B2b2c Multi-business

6 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-28559

Exploit
  • EPSS 0.58%
  • Veröffentlicht 22.03.2024 12:15:07
  • Zuletzt bearbeitet 28.05.2025 18:59:45

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.

5.4

CVE-2024-28560

Exploit
  • EPSS 0.58%
  • Veröffentlicht 22.03.2024 12:15:07
  • Zuletzt bearbeitet 28.05.2025 18:58:39

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php component.

9.8

CVE-2024-25247

Exploit
  • EPSS 0.15%
  • Veröffentlicht 26.02.2024 23:15:07
  • Zuletzt bearbeitet 18.09.2025 16:25:52

SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.

9.8

CVE-2024-25248

Exploit
  • EPSS 0.14%
  • Veröffentlicht 26.02.2024 22:15:07
  • Zuletzt bearbeitet 27.03.2025 21:15:46

SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.

9.8

CVE-2024-0933

  • EPSS 0.08%
  • Veröffentlicht 26.01.2024 17:15:11
  • Zuletzt bearbeitet 21.11.2024 08:47:47

A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The ...

8.8

CVE-2018-14570

Exploit
  • EPSS 0.84%
  • Veröffentlicht 23.07.2018 20:29:00
  • Zuletzt bearbeitet 21.11.2024 03:49:19

A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote member to upload a .php file to the web server via a profile avatar field, by using an image Content-Type (e.g...