Lucene search
+L

1912 matches found

Vulnrichment
Vulnrichment
added 2025/11/07 12:32 p.m.3 views

CVE-2025-12854 newbee-mall-plus seckillExecution executeSeckill authorization

A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the argument userid leads to authorization bypass. It is possible to initiate the attack remotely. The attack is considered to...

6.3CVSS6.5AI score0.00456EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/11/07 12:32 p.m.25 views

CVE-2025-12854 newbee-mall-plus seckillExecution executeSeckill authorization

A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the argument userid leads to authorization bypass. It is possible to initiate the attack remotely. The attack is considered to...

6.3CVSS0.00456EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/11/07 12:32 p.m.10 views

EUVD-2025-38252

A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the argument userid leads to authorization bypass. It is possible to initiate the attack remotely. The attack is considered to...

6.3CVSS4.5AI score0.00456EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2025/11/07 12:00 a.m.15 views

PT-2025-45419

Name of the Vulnerable Software and Affected Versions newbee-mall-plus versions up to 2.4.1 Description A flaw exists in newbee-mall-plus where manipulation of the userid argument within the executeSeckill function, located in the /seckillExecution/ file, can result in authorization bypass. This...

6.3CVSS6.1AI score0.00456EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/11/07 12:00 a.m.17 views

newbee-mall-plus 安全漏洞

newbee-mall-plus is an open source e-commerce system by newbee-ltd. A security vulnerability exists in newbee-mall-plus version 2.4.1 and earlier, which stems from incorrect manipulation of the parameter userid in the file /seckillExecution/, which could lead to authorization bypass...

6.3CVSS4.7AI score0.00456EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/10/28 3:04 p.m.9 views

CVE-2025-12289

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activitystate/1/categoryid/1001. Executing manipulation of the argument categoryid can lead to...

5.3CVSS5.2AI score0.00321EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/28 3:04 p.m.10 views

CVE-2025-12290

A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible t...

5.3CVSS5.3AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
added 2025/10/27 3:15 p.m.11 views

CVE-2025-12289

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activitystate/1/categoryid/1001. Executing manipulation of the argument categoryid can lead to...

5.3CVSS0.00321EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/27 3:02 p.m.28 views

CVE-2025-12290 Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 359 cross site scripting

A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible t...

5.3CVSS0.00321EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/27 3:02 p.m.13 views

CVE-2025-12290 Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 359 cross site scripting

A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible t...

5.3CVSS3.8AI score0.00321EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/27 3:02 p.m.31 views

CVE-2025-12290

CVE-2025-12290 affects Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. The vulnerability is a cross-site scripting in the file /i/359 created by manipulating the keywords argument. It is exploitable remotely, with exploitation details publicly disclose...

5.3CVSS5.2AI score0.00321EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/27 3:02 p.m.10 views

CVE-2025-12289 Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1001 cross site scripting

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activitystate/1/categoryid/1001. Executing manipulation of the argument categoryid can lead to...

5.3CVSS3.8AI score0.00321EPSS
SaveExploits0References4
CVE
CVE
added 2025/10/27 3:02 p.m.21 views

CVE-2025-12289

CVE-2025-12289 affects the Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. The flaw is an cross-site scripting vulnerability arising from manipulating the argument category_id in the file /Point/index/activity_state/1/category_id/1001. The issue can be...

5.3CVSS5.1AI score0.00321EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/27 3:02 p.m.8 views

EUVD-2025-36195

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activitystate/1/categoryid/1001. Executing manipulation of the argument categoryid can lead to...

5.3CVSS3.6AI score0.00321EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/27 3:02 p.m.22 views

CVE-2025-12289 Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1001 cross site scripting

A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activitystate/1/categoryid/1001. Executing manipulation of the argument categoryid can lead to...

5.3CVSS0.00321EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/27 12:00 a.m.12 views

Suishang Enterprise-Level B2B2C Multi-User Mall System 安全漏洞

Suishang Enterprise-Level B2B2C Multi-User Mall System is an e-commerce system software from China Suishang Company. A security vulnerability exists in Suishang Enterprise-Level B2B2C Multi-User Mall System version 1.0, which originates from the incorrect operation of the parameter keywords in th...

5.3CVSS4.6AI score0.00321EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.11 views

PT-2025-43968

Name of the Vulnerable Software and Affected Versions Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System version 1.0 Description A flaw exists in the system that allows for cross site scripting. Manipulation of the category id argument in the file...

5.3CVSS5.2AI score0.00321EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2025/10/27 12:00 a.m.12 views

Suishang Enterprise-Level B2B2C Multi-User Mall System 安全漏洞

Suishang Enterprise-Level B2B2C Multi-User Mall System is an e-commerce system software from China Suishang Company. A security vulnerability exists in Suishang Enterprise-Level B2B2C Multi-User Mall System version 1.0, which originates from the incorrect operation of the parameter categoryid in...

5.3CVSS4.5AI score0.00321EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.16 views

PT-2025-43969

Name of the Vulnerable Software and Affected Versions Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System version 1.0 Description A cross site scripting issue exists in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System...

5.3CVSS6AI score0.00321EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2025/10/09 12:14 a.m.17 views

CVE-2025-60834

A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input...

6.5CVSS7.8AI score0.00361EPSS
SaveExploits1References1
Rows per page
Query Builder