CVE-2026-105572

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

CVE-2026-105572 PickMall Lilishop Buyer Invoice List receipt authorization

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

EUVD-2026-92930

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

CVE-2026-105572

A vulnerability exists in PickMall Lilishop version 4.2.4 and below, specifically within the Buyer Invoice List component. An unknown function in the /buyer/trade/receipt file is susceptible to authorization bypass when the memberId argument is manipulated. This flaw is exploitable remotely . Pub...

CVE-2026-105571

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization. It is possible to initiate the attack...

EUVD-2026-92918

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization. It is possible to initiate the attack...

CVE-2026-105571

PickMall Lilishop versions up to 4.2.4 are vulnerable to an improper authorization flaw within the Mobile Binding component. The issue originates from an unknown function in the /buyer/passport/member/bindMobile file, where manipulation of the Username argument allows for unauthorized access. Thi...