Threats tagged 'ghsa-394c-r5mr-6r95'

CoreShop versions through 1.5.5 have an unauthenticated SQL injection vulnerability in the api/Good/GetGoodsPageList endpoint. The flaw arises from an unvalidated 'order' parameter that is appended directly to an ORDER BY clause, allowing attackers to inject subqueries. Exploitation can bypass SqlSugar's field validation and use blind SQL injection techniques to extract sensitive data such as member accounts and orders.