Cpe:2.3:a:coreunion:coreshop:*:*:*:*:*:*:*:*

CoreShop versions up to 1.5.5 contain an unauthenticated SQL injection vulnerability in the api/Agent/GetGoodsPageList endpoint, allowing attackers to extract sensitive data via blind SQL injection techniques.