| Package | Affected versions | Patched versions |
|---|---|---|
| likeshop | < 2.5.7 | 2.5.7 |
SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free