Description
SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.
Critical · 9.8
CVE-2024-25247
EUVD-2024-22583GHSA-m6hf-6p6v-vjp3
SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitud…
Published Feb 26, 2024 · Updated Aug 29, 2024 · Assigned by mitre