Advisories · Technology
CoreUnion CoreShop.
Every CVE that names CoreUnion CoreShop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
CoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList
- CoreUnion CoreShop
- SQL injection
- CVSS 8.7 High
CoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList
- CoreUnion CoreShop
- SQL injection
- CVSS 5.3 Medium
CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm and SendReship
- CoreUnion CoreShop
- Broken access control