2 matches found
CVE-2024-6452 linlinjava litemall AdminGoodscontroller.java sql injection
A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file AdminGoodscontroller.java. The manipulation of the argument goodsId/goodsSn/name leads to sql injection. The attack can be launched remotely...
5.3CVSS6.4AI score0.00475EPSS
SaveExploits1References6
PT-2024-37639 · Litemall · Litemall
Name of the Vulnerable Software and Affected Versions: litemall versions up to 1.8.0 Description: A critical issue was found in the AdminGoodscontroller.java file, where the manipulation of the goodsId, goodsSn, and name arguments leads to SQL injection. This issue can be exploited remotely...
6.5CVSS7.4AI score0.00475EPSS
SaveExploits1References5
20