CVE Browser

linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting

linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting

linlinjava litemall Database Setting DbUtil.java load argument injection

linlinjava litemall Admin Endpoint sql injection

linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection

linlinjava litemall cancel WxAftersaleController improper authorization

linlinjava litemall Business Logic express logic error

linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials

linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload

linlinjava litemall upload unrestricted upload

linlinjava litemall File delete path traversal

linlinjava litemall post improper authorization

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name paramete…

linlinjava litemall AdminGoodscontroller.java sql injection

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, order…

An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/WxStorageController.ja…