SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://chiggerlor.substack.com/p/cve-2024-28560-cve-2024-28559 | Exploit Third Party Advisory |
| https://chiggerlor.substack.com/p/cve-2024-28560-cve-2024-28559 | Exploit Third Party Advisory |
| https://gitee.com/niushop-team/niushop_b2c_v5 | Permissions Required |
| https://gitee.com/niushop-team/niushop_b2c_v5 | Permissions Required |
| https://v5.niuteam.cn | Broken Link |
| https://v5.niuteam.cn | Broken Link |
| https://v5.niuteam.cn/ | Broken Link |
| https://v5.niuteam.cn/ | Broken Link |
| https://www.niushop.com/ | Vendor Advisory |
| https://www.niushop.com/ | Vendor Advisory |
Configurations
History
28 May 2025, 18:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Niushop
Niushop b2b2c Multi-business |
|
| References | () https://v5.niuteam.cn/ - Broken Link | |
| References | () https://chiggerlor.substack.com/p/cve-2024-28560-cve-2024-28559 - Exploit, Third Party Advisory | |
| References | () https://gitee.com/niushop-team/niushop_b2c_v5 - Permissions Required | |
| References | () https://www.niushop.com/ - Vendor Advisory | |
| References | () https://v5.niuteam.cn - Broken Link | |
| CPE | cpe:2.3:a:niushop:b2b2c_multi-business:*:*:*:*:*:*:*:* |
22 Mar 2024, 12:45
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-22 12:15
Updated : 2025-05-28 18:59
NVD link : CVE-2024-28559
Mitre link : CVE-2024-28559
JSON object : View
Products Affected
niushop
- b2b2c_multi-business
CWE
No CWE.