https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-28560.htmlhttps://patchthecve.com/cve/CVE-2024-28560.htmlWed, 17 Jun 2026 07:21:30 +0000MEDIUM 5.4: SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the deleteArea() function of the Address.php component.https://patchthecve.com/cve/CVE-2024-28559.htmlhttps://patchthecve.com/cve/CVE-2024-28559.htmlWed, 17 Jun 2026 07:21:30 +0000HIGH 8.8: SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.https://patchthecve.com/cve/CVE-2024-25247.htmlhttps://patchthecve.com/cve/CVE-2024-25247.htmlWed, 17 Jun 2026 07:15:45 +0000CRITICAL 9.8: SQL Injection vulnerability in /app/api/controller/Store.php in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via latitude and longitude parameters.https://patchthecve.com/cve/CVE-2024-25248.htmlhttps://patchthecve.com/cve/CVE-2024-25248.htmlWed, 17 Jun 2026 07:15:46 +0000CRITICAL 9.8: SQL Injection vulnerability in the orderGoodsDelivery() function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the order_id parameter.https://patchthecve.com/cve/CVE-2024-0933.htmlhttps://patchthecve.com/cve/CVE-2024-0933.htmlWed, 17 Jun 2026 06:54:35 +0000MEDIUM 6.3: A vulnerability was found in Niushop B2B2C V5 and classified as critical. Affected by this issue is some unknown functionality of the file \app\model\Upload.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may b