CoreUnion vulnerabilities
We track 2 vulnerabilities in CoreUnion products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest CoreUnion vulnerabilities
- 7.5 High severity
CoreShop: Improper Neutralization of Special Elements used in an SQL Command
CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPageList endpoint via the order parameter appended to an ORDER BY clause. Anonymous attackers can inject subqueries that bypass SqlSugar's fiel
- 7.5 High severity
CoreShop: Improper Neutralization of Special Elements used in an SQL Command
CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpoint via the unvalidated order parameter appended to ORDER BY. Attackers can inject subqueries that bypass SqlSugar's field check and use boolea