B2b2c Multi-business vulnerabilities
4 known vulnerabilities in B2b2c Multi-business from Niushop. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
b2b2c_multi-business: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.
- 9.8 Critical severity
b2b2c_multi-business: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.
- 9.8 Critical severity
B2b2c Multi-business: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.
- 9.8 Critical severity
B2B2C: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit ha