Lucene search
+L

25 matches found

Cvelist
Cvelist
•added 2026/04/02 12:30 p.m.•48 views

CVE-2026-5328 shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...

6.5CVSS0.00333EPSS
SaveExploits0References7
CVE
CVE
•added 2026/04/02 12:30 p.m.•35 views

CVE-2026-5328

CVE-2026-5328 affects shsuishang modulithshop, specifically the ProductItemDao/ProductIndexServiceImpl.java listItem function. The vulnerability arises from manipulating the sidx/sort parameter, enabling SQL injection via remote input. A patch identified as 42bcb9463425d1be906c3b290cf29885eb5a232...

6.5CVSS6.1AI score0.00333EPSS
SaveExploits0References7
osv-cve
osv-cve
•added 2026/04/02 12:30 p.m.•3 views

CVE-2026-5328 shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...

5.3CVSS5.3AI score
SaveExploits0References9
Vulnrichment
Vulnrichment
•added 2026/04/02 12:30 p.m.•15 views

CVE-2026-5328 shsuishang modulithshop ProductItemDao ProductIndexServiceImpl.java listItem sql injection

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...

6.5CVSS6.1AI score0.00333EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/04/02 12:00 a.m.•27 views

ModulithShop SQL注入漏洞

ModulithShop is an online shopping system developed by Shopsuite’s individual developers. ModulithShop has a SQL injection vulnerability. This vulnerability stems from improper handling of parameters sidx/sort in the function listItem in the file...

6.5CVSS6.6AI score0.00333EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/02 12:00 a.m.•5 views

CVE-2026-5328: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6. The impacted element is the function listItem of the file src/main/java/com/suisung/shopsuite/pt/service/impl/ProductIndexServiceImpl.java of the component ProductItemDao Interface. Executing...

6.5CVSS6.1AI score0.00333EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/18 12:11 a.m.•25 views

CVE-2025-13252

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...

7.5CVSS6.5AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/17 10:04 a.m.•24 views

CVE-2025-13246

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

6.5CVSS6.8AI score0.00411EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/17 12:30 a.m.•18 views

EUVD-2025-197734

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...

7.5CVSS6.5AI score0.00331EPSS
SaveExploits0References6
NVD
NVD
•added 2025/11/16 11:15 p.m.•12 views

CVE-2025-13252

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...

7.5CVSS0.00331EPSS
SaveExploits0References5
CVE
CVE
•added 2025/11/16 11:02 p.m.•26 views

CVE-2025-13252

ShopSuite ModulithShop (up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a) is affected by a vulnerability in the RSA/OAuth2/Database component that leads to hard-coded credentials. The issue can be exploited remotely, and public exploitation is noted. Several connected sources confirm the same root ...

7.5CVSS6.5AI score0.00331EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/11/16 11:02 p.m.•5 views

CVE-2025-13252 shsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...

7.5CVSS6.5AI score0.00331EPSS
SaveExploits0References5
osv-cve
osv-cve
•added 2025/11/16 11:02 p.m.•4 views

CVE-2025-13252 shsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...

6.9CVSS5.2AI score
SaveExploits0References7
Cvelist
Cvelist
•added 2025/11/16 11:02 p.m.•33 views

CVE-2025-13252 shsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The...

7.5CVSS0.00331EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/11/16 12:30 p.m.•21 views

EUVD-2025-197729

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

6.5CVSS6.3AI score0.00411EPSS
SaveExploits0References5
NVD
NVD
•added 2025/11/16 10:15 a.m.•16 views

CVE-2025-13246

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

6.5CVSS0.00411EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/11/16 10:02 a.m.•6 views

CVE-2025-13246 shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

6.5CVSS6.2AI score0.00411EPSS
SaveExploits0References4
osv-cve
osv-cve
•added 2025/11/16 10:02 a.m.•4 views

CVE-2025-13246 shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

5.3CVSS5.5AI score
SaveExploits0References6
CVE
CVE
•added 2025/11/16 10:02 a.m.•32 views

CVE-2025-13246

The CVE-2025-13246 entry affects shsuishang ShopSuite ModulithShop, specifically the JwtAuthenticationFilter in src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The vulnerability enables path traversal via the JwtAuthenticationFilter, with remote exploitation poss...

6.5CVSS6.2AI score0.00411EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/11/16 10:02 a.m.•34 views

CVE-2025-13246 shsuishang ShopSuite ModulithShop JwtAuthenticationFilter.java JwtAuthenticationFilter path traversal

A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationFilter of the file src/main/java/com/suisung/shopsuite/common/security/JwtAuthenticationFilter.java. The manipulation leads to path...

6.5CVSS0.00411EPSS
SaveExploits0References4
Rows per page
Query Builder