Detections
Analytics
CVE-2024-25247
critical
Description
SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.
References
https://harryha.substack.com/p/phuong-phap-phan-tich-ma-nguon-tim-lo-hong