Niushop vulnerabilities
We track 4 vulnerabilities in Niushop products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 22, 2024.
Latest Niushop vulnerabilities
- 8.8 High severity
b2b2c_multi-business: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.
- 9.8 Critical severity
b2b2c_multi-business: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.
- 9.8 Critical severity
B2b2c Multi-business: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.
- 9.8 Critical severity
B2B2C: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit ha