Non évaluée
SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1) listid parameter in detail.php and the (2) group_price or groupid...
CVE-2020-21809
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1) listid parameter in detail.php and the (2) group_price or groupid parameters in search_result.php.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- patch github.com
- patch nukeviet.vn
- report whitehub.net
- report whitehub.net