| शीर्षक | Shopsuite modulithshop 829bac71f507e84684c782b9b062b8bf3b5585d6 SQL Injection |
|---|
| विवरण | The ShopSuite system contains a SQL injection vulnerability in the listItemKey method of the ProductItemDao interface. Attackers can inject malicious SQL code through the sidx and sort parameters in ORDER BY clauses, allowing extraction of sensitive information from the database including product data, user information, system configuration, and potentially administrative credentials. |
|---|
| स्रोत | ⚠️ https://github.com/shsuishang/modulithshop/issues/3 |
|---|
| उपयोगकर्ता | Anonymous User |
|---|
| सबमिशन | 16/03/2026 12:51 PM (4 महीनों पहले) |
|---|
| संयम | 01/04/2026 03:29 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 354659 [shsuishang modulithshop तक 829bac71f507e84684c782b9b062b8bf3b5585d6 ProductItemDao Interface ProductIndexServiceImpl.java listItem sidx/sort SQL इंजेक्शन] |
|---|
| अंक | 19 |
|---|