CVE-2024-25248

概要

参考情報

• harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong · Exploit

b2b2c multi-business のその他の脆弱性

• CVE-2024-28560中 5.4SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of t…
• CVE-2024-28559高 8.8SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the…
• CVE-2024-25247緊急 9.8SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude…
• CVE-2024-0933緊急 9.8A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \…
• CVE-2018-14570高 8.8A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote …