CVE-2024-28560

Description

References

• chiggerlor.substack.com/p/cve-2024-28560-cve-2024-28559 · Exploit
• gitee.com/niushop-team/niushop_b2c_v5 · Permissions Required
• v5.niuteam.cn · Broken Link
• niushop.com · Vendor Advisory

Más vulnerabilidades de b2b2c multi-business

• CVE-2024-28559ALTO 8.8SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the…
• CVE-2024-25247CRÍTICO 9.8SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude…
• CVE-2024-25248CRÍTICO 9.8SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the …
• CVE-2024-0933CRÍTICO 9.8A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \…
• CVE-2018-14570ALTO 8.8A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote …