SQL Injection Vulnerability in Niushop B2B2C Allows Escalation of Privileges
CVE-2024-28560

Currently unrated

Key Information:

Vendor

Niushop

Status
B2b2c Multi-business
Vendor
CVE Published:
22 March 2024

What is CVE-2024-28560?

SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php component.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.niushop.com/
https://v5.niuteam.cn
https://gitee.com/niushop-team/niushop_b2c_v5

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.