CVE-2024-25248

PoC —

CVSS 3.1

9.8 critical

EPSS

<1%p48

Published

Feb 26, 2024 (Feb 26, 2024)

Modified

Jun 17, 2026

Description

SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.

Vendors: niushop
Products: b2b2c multi-business
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.