A vulnerability classified as critical has been found in likeshop 2.5.7. This affects the function
getOrderList
. The manipulation leads to sql injection.
This vulnerability is uniquely identified as CVE-2024-34949. The attack needs to be initiated within the local network. There is no exploit available.