CVE-2024-25248

Published Feb 26, 2024

Last updated 9 months ago

Overview

Description
SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.
Source
cve@mitre.org
NVD status
Awaiting Analysis

Social media

Hype score
Not currently trending