Threats tagged 'ghsa-c5ch-p933-jxhp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-119656CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the High8.72026-10-30GCVE DatabaseCVE-2026-119656 CoreShop by CoreUnion versions through 1.5.5 contain an unauthenticated SQL injection vulnerability in the api/Agent/GetGoodsPageList endpoint. The flaw allows anonymous attackers to inject subqueries via the order parameter, bypassing SqlSugar's field validation. This can lead to extraction of member account and order data using boolean-based or time-based blind SQL injection techniques. Report on CVE-2026-119656 Vulnerability CWE-89 #ghsa-c5ch-p933-jxhp	GCVE Database	2026-10-30

Page 1 of 1