SQL Injection Vulnerability in Niushop B2B2C Allows Escalation of Privileges
CVE-2024-28560

Currently unrated

Key Information:

Vendor: Niushop
Status: B2b2c Multi-business
Vendor: CVE Published:; 22 March 2024

What is CVE-2024-28560?

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php component.

References

https://www.niushop.com/

https://v5.niuteam.cn

https://gitee.com/niushop-team/niushop_b2c_v5

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 22, 2024
Vulnerability Reserved
Mar 8, 2024