Lucene search
+L

8 matches found

Mend
Mend
•added 2025/03/07 2:00 p.m.•4 views

CVE-2025-2087

A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The explo...

6.1CVSS0.00398EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/03/07 12:00 a.m.•5 views

PT-2025-10089

Name of the Vulnerable Software and Affected Versions StarSea99 starsea-mall version 1.0 Description A vulnerability has been found in StarSea99 starsea-mall, affecting some unknown processing of the file "/admin/goods/update". The manipulation of the argument goodsName leads to cross-site...

6.1CVSS0.00398EPSS
SaveExploits1References11
OSV
OSV
•added 2022/04/10 9:15 p.m.•14 views

CVE-2022-27476

A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...

6.1CVSS5.9AI score0.00555EPSS
SaveExploits1References1
Mend
Mend
•added 2022/04/10 9:01 p.m.•4 views

CVE-2022-27476

A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...

6.1CVSS0.00555EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/10 12:00 a.m.•7 views

CVE-2022-27476: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter...

6.1CVSS6.6AI score0.00555EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/10 12:00 a.m.•18 views

Newbee-Mall 跨站脚本漏洞

Newbee-Mall is an e-commerce system. Newbee-Mall v1.0.0 contains a security vulnerability that could be exploited by attackers to execute arbitrary Web scripts or HTML via the goodsName parameter of /admin/goods/update...

6.1CVSS6AI score0.00555EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/04/10 12:00 a.m.•3 views

PT-2022-18445

Name of the Vulnerable Software and Affected Versions Newbee-Mall version 1.0.0 Description A cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter in the "/admin/goods/update" API endpoint. Recommendations...

6.1CVSS6.3AI score0.00555EPSS
SaveExploits1References3
OSV
OSV
•added 2018/09/17 4:29 a.m.•15 views

CVE-2018-17132

admin/goodsupdate.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue array parameter...

7.2CVSS6.1AI score0.02107EPSS
SaveExploits1References1
Rows per page
Query Builder