CVE-2026-119655 | CoreUnion CoreShop up to 1.5.5 GetGoodsPageList order sql injection

October 30, 2026 Yanac

A vulnerability has been found in CoreUnion CoreShop up to 1.5.5 and classified as critical. Affected is an unknown function of the file api/Good/GetGoodsPageList of the component GetGoodsPageList. The manipulation of the argument order leads to sql injection.

This vulnerability is documented as CVE-2026-119655. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More