Soumettre #502919: Niushop Niushop V5 V5 SQL Injectioninformation

TitreNiushop Niushop V5 V5 SQL Injection
DescriptionIn the getLocationStoreList function in niushop_b2c_v5-master/niushop/app/model/store/Store.php, the native SQL statement concatenates $lnglat[ 'lng' ] and $lnglat[ 'lat' ].And niushop_b2c_v5-master/niushop/app/api/controller/Store.php calls this method.And the vulnerability condition can be triggered without logging in.
La source⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Niushop%20V5%20SQL%20injection-2.md
Utilisateur
 BFS-Lab (UID 73306)
Soumission18/02/2025 08:21 (il y a 2 ans)
Modérer28/02/2025 21:06 (11 days later)
StatutDupliqué
Entrée VulDB254812 [Niushop B2B2C Store.php longitude injection SQL]
Points0

◂ PrécédentAperçuSuivant ▸

Want to know what is going to be exploited?

We predict KEV entries!