Non évaluée

SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function,...

CVE-2024-34949 Première détection SecPulse May 21, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

SQL injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function OrderLogic::getOrderList function, exploited at the /admin/order/lists.html endpoint.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web charm-august-88a.notion.site

Faits clés

Gravité: Non évaluée
Publication: May 21, 2024
Première détection SecPulse: May 21, 2024

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03