Products: 2
    Vulnerabilities: 10
    Known Exploited: 0
    3
    Critical Level Threats
    3
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-28560

    SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php component.

    Last Modified: May 28, 2025
    Published: Mar 22, 2024

    CVE-2024-28559

    SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.

    Last Modified: May 28, 2025
    Published: Mar 22, 2024

    CVE-2024-25247

    SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.

    Last Modified: Sep 18, 2025
    Published: Feb 26, 2024

    CVE-2024-25248

    SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.

    Last Modified: Mar 27, 2025
    Published: Feb 26, 2024

    CVE-2024-0933

    Niushop B2B2C Upload.php unrestricted upload

    Last Modified: May 29, 2025
    Published: Jan 26, 2024
    Items Per Page
    Niushop Vulnerabilities & Security CVEs | CVE-DB