| शीर्षक | Niushop Niushop V5 V5 SQL Injection |
|---|
| विवरण | In the getLocationStoreList function in niushop_b2c_v5-master/niushop/app/model/store/Store.php, the native SQL statement concatenates $lnglat[ 'lng' ] and $lnglat[ 'lat' ].And niushop_b2c_v5-master/niushop/app/api/controller/Store.php calls this method.And the vulnerability condition can be triggered without logging in. |
|---|
| स्रोत | ⚠️ https://github.com/BFS-Lab/BFSDV/blob/main/Niushop%20V5%20SQL%20injection-2.md |
|---|
| उपयोगकर्ता | BFS-Lab (UID 73306) |
|---|
| सबमिशन | 18/02/2025 08:21 AM (2 साल पहले) |
|---|
| संयम | 28/02/2025 09:06 PM (11 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 254812 [Niushop B2B2C Store.php longitude SQL इंजेक्शन] |
|---|
| अंक | 0 |
|---|