CVE-2024-48178

newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery SSRF via the goodsCoverImg parameter...

newbee-mall 安全漏洞

newbee-mall is an e-commerce system. A security vulnerability exists in newbee-mall v1.0.0, which originates from a server-side request forgery SSRF vulnerability via the goodCoverImg parameter...

CVE-2024-48178

newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery SSRF via the goodsCoverImg parameter...

CVE-2024-48178

newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery SSRF via the goodsCoverImg parameter...

PT-2024-33012 · Unknown · Newbee-Mall

Name of the Vulnerable Software and Affected Versions: newbee-mall version 1.0.0 Description: The issue allows for Server-Side Request Forgery SSRF via the goodsCoverImg parameter. Recommendations: For version 1.0.0, avoid using the goodsCoverImg parameter until the issue is resolved...

CVE-2024-48178

The CVE-2024-48178 entry concerns newbee-mall v1.0.0 with a Server-Side Request Forgery (SSRF) vulnerability exposed through the goodsCoverImg parameter. Affected product: newbee-mall 1.0.0. Root cause and precise impact are described as SSRF with the potential for high impact per CVSS 3.1 (base ...

CVE-2024-40425

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...

CVE-2024-40425

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...

CVE-2024-40425

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...

PT-2024-28843 · Unknown · Spark Mall B2C Mall

Name of the Vulnerable Software and Affected Versions: Spark Mall B2C Mall versions 1.1.6 and earlier Description: The issue allows a remote attacker to execute arbitrary code. This is achieved via the controller/common.php component. Recommendations: For Spark Mall B2C Mall versions 1.1.6 and...

CVE-2024-40425

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...

Malicious code in mall-front-babel-directive (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2647 Malicious code in mall-front-babel-directive (npm)

--- -= Per source details. Do not edit below this line.=-...

Logic Flaw Vulnerability in ECShop Mall System of ShangPai Software Co.

ECShop mall system is an open source mall system. A logic flaw vulnerability exists in the ECShop Mall System of Merchant Pie Software Limited, which can be exploited by an attacker to reset a user's password...

mall-net.com Cross Site Scripting vulnerability OBB-3882909

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Global Coalition and Tech Giants Unite Against Commercial Spyware Abuse

A coalition of dozens of countries, including France, the U.K., and the U.S., along with tech companies such as Google, MDSec, Meta, and Microsoft, have signed a joint agreement to curb the abuse of commercial spyware to commit human rights abuses. The initiative, dubbed the Pall Mall Process, ai...

term.yerevanmall.am Cross Site Scripting vulnerability OBB-3846705

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-4961

A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The...

CVE-2022-4961

A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The...

Sql injection

A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/order leads to sql injection. The...