CVE-2024-28559

概要

参考情報

• chiggerlor.substack.com/p/cve-2024-28560-cve-2024-28559 · Exploit
• gitee.com/niushop-team/niushop_b2c_v5 · Permissions Required
• v5.niuteam.cn · Broken Link
• v5.niuteam.cn · Broken Link
• niushop.com · Vendor Advisory

b2b2c multi-business のその他の脆弱性

• CVE-2024-28560中 5.4SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of t…
• CVE-2024-25247緊急 9.8SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude…
• CVE-2024-25248緊急 9.8SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the …
• CVE-2024-0933緊急 9.8A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \…
• CVE-2018-14570高 8.8A file upload vulnerability in application/shop/controller/member.php in Niushop B2B2C Multi-business basic version V1.11 allows any remote …