CVE-2024-24027

概要

参考情報

• samyueru.substack.com/p/cve-2024-24027-sql-injection-trong-likeshop · Exploit

likeshop のその他の脆弱性

• CVE-2024-41432中 5.3An IP Spoofing vulnerability has been discovered in Likeshop up to 2.5.7.20210811. This issue allows an attacker to replace their real IP ad…
• CVE-2024-5766中 4.8A vulnerability was found in Likeshop up to 2.5.7 and classified as problematic. This issue affects some unknown processing of the file /adm…
• CVE-2024-34949高 8.2SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList…
• CVE-2024-24028中 5.9Server Side Request Forgery (SSRF) vulnerability in Likeshop before 2.5.7 allows attackers to view sensitive information via the avatar para…
• CVE-2024-0352緊急 9.8A vulnerability classified as critical was found in Likeshop up to 2.5.7.20210311. This vulnerability affects the function FileServer::userF…