CVE-2026-5328

LOW EPSS 10.5%

Published Apr 2, 20262mo ago · Modified Jun 17, 20261w ago

2.1 CVSS 4.0

Low

Published Apr 2, 2026 2mo ago

Last Modified Jun 17, 2026 1w ago

Description

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing a manipulation of the argument sidx/sort can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. This patch is called 42bcb9463425d1be906c3b290cf29885eb5a2324. A patch should be applied to remediate this issue.

CVSS Details

Base Score

2.1

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

10.5% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-74

CWE-89 SQL Injection Injection

References 7

github.com https://github.com/shsuishang/modulithshop/
github.com https://github.com/shsuishang/modulithshop/commit/42bcb9463425d1be906c3b290cf29885eb5a2324
github.com https://github.com/shsuishang/modulithshop/issues/3
github.com https://github.com/shsuishang/modulithshop/issues/3#issue-4081835434
vuldb.com https://vuldb.com/submit/780789
vuldb.com https://vuldb.com/vuln/354659
vuldb.com https://vuldb.com/vuln/354659/cti

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.