CVE-2026-105571 PickMall Lilishop Mobile Binding bindMobile improper authorization

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization. It is possible to initiate the attack...

CVE-2026-105571 PickMall Lilishop Mobile Binding bindMobile improper authorization

A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. This manipulation of the argument Username causes improper authorization. It is possible to initiate the attack...

CVE-2026-105571

PickMall Lilishop versions up to 4.2.4 are vulnerable to an improper authorization flaw within the Mobile Binding component. The issue originates from an unknown function in the /buyer/passport/member/bindMobile file, where manipulation of the Username argument allows for unauthorized access. Thi...