Lucene search
+L

4 matches found

RedhatCVE
RedhatCVE
•added 2025/12/05 10:33 p.m.•17 views

CVE-2025-14051

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...

8.8CVSS6.4AI score0.00474EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/04 11:15 p.m.•18 views

CVE-2025-14051

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...

8.8CVSS0.00474EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/12/04 12:00 a.m.•17 views

PT-2025-49171

Name of the Vulnerable Software and Affected Versions youlaitech youlai-mall versions 1.0.0 through 2.0.0 Description A flaw exists in youlaitech youlai-mall versions 1.0.0 through 2.0.0 related to improper control of dynamically-identified variables. The issue is present in the getById,...

6.5CVSS6.3AI score0.00474EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/04 12:00 a.m.•5 views

CVE-2025-14051: Improper Control of Dynamically-Identified Variables

A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function getById/updateAddress/deleteAddress of the file /mall-ums/app-api/v1/addresses/. Executing manipulation can lead to improper control of dynamically-identified variables. The attack can be executed remotely. The...

8.8CVSS5.3AI score0.00474EPSS
SaveExploits1References1
Rows per page
Query Builder