SQL injection vulnerability in Niushop B2B2C v.5.3.3 and before allows an attacker to escalate privileges via the setPrice() function of the Goodsbatchset.php component.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')