PT-2025-31870 · Exrick +1 · Exrick Xboot +1

Name of the Vulnerable Software and Affected Versions: Exrick xboot versions through 3.3.4 Description: A critical vulnerability exists in Exrick xboot related to the Swagger component. The issue involves server-side request forgery SSRF resulting from the manipulation of the loginUrl argument...

CVE-2025-8528: Cleartext Storage of Sensitive Information in a Cookie

A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of the file /xboot/permission/getMenuList. The manipulation leads to cleartext storage of sensitive information in a cookie. It is possible to launch the attack remotely. The...

PT-2025-31867 · Exrick · Exrick Xboot

Name of the Vulnerable Software and Affected Versions: Exrick xboot versions up to 3.3.4 Description: A critical issue exists in Exrick xboot that allows for unrestricted file uploads. This is due to the manipulation of the File argument within the Upload function located in the file...

CVE-2025-8527: Server-Side Request Forgery (SSRF)

A vulnerability was found in Exrick xboot up to 3.3.4. It has been rated as critical. This issue affects some unknown processing of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/SecurityController.java of the component Swagger. The manipulation of the argument...

CVE-2025-8526: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Exrick xboot up to 3.3.4. It has been declared as critical. This vulnerability affects the function Upload of the file xboot-fast/src/main/java/cn/exrick/xboot/modules/base/controller/common/UploadController.java. The manipulation of the argument File leads to...

XMall 安全漏洞

XMall is a distributed e-commerce shopping mall based on SOA architecture by an individual developer at Exrick. A security vulnerability exists in XMall v1.1, which stems from improper /index access control and could lead to bypassing authentication...

Exrick XMall Security Vulnerability

Exrick XMall is a distributed e-commerce shopping mall based on SOA architecture. A security vulnerability exists in Exrick XMall v1.1, which stems from the discovery of an SQL injection vulnerability via the orderDir parameter...

CVE-2021-43432

A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...

CVE-2021-43432

A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...

CVE-2021-43432

A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...

CVE-2021-43432

A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...

CVE-2021-43432

The CVE-2021-43432 entry concerns an XSS vulnerability in the Exrick XMall Admin Panel, exploitable via a GET parameter on the product-add.jsp page. Affected software is Exrick XMall Admin Panel; the vulnerability arises from improper handling of user-supplied input in that JSP, enabling script e...

PT-2022-11836 · Unknown · Exrick Xmall Admin Panel

Name of the Vulnerable Software and Affected Versions: Exrick XMall Admin Panel affected versions not specified Description: A Cross Site Scripting XSS issue exists in the Exrick XMall Admin Panel, specifically via the GET parameter in the product-add.jsp page. This allows for potential malicious...

CVE-2021-43432: Improper Neutralization of Input During Web Page Generation

A Cross Site Scripting XSS vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via the GET parameter in product-add.jsp...

Exrick XMall 跨站脚本漏洞

Exrick XMall is a distributed e-commerce shopping mall based on SOA architecture. A security vulnerability exists in the Exrick XMall Admin Panel, which originates from a GET parameter in product-add.jsp...