ID: CVE-2024-25248
Published: 2024-02-26T22:15Z
Description: description_data: SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.