Description
SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.
Critical · 9.8
CVE-2024-25248
EUVD-2024-22584GHSA-2726-63m5-f24q
SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the…
Published Feb 26, 2024 · Updated Mar 27, 2025 · Assigned by mitre