SQL Injection Vulnerability in Tesco Mall System

Tesco mall system for the majority of small and medium-sized enterprises to develop a professional-level e-commerce mall platform system. Ease2Shop Mall system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jinwei Mobile Mall (CNVD-2021-16883)

Jinwei Mobile Mall is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall, which can be exploited by attackers to obtain sensitive information from the database...

Niushop open source mall file upload vulnerability

Niushop open source mall is a PHP open source mall system . Niushop open source mall file upload vulnerability , an attacker can use this vulnerability to obtain server control privileges...

SQL Injection Vulnerability in Jinwei Mobile Mall of Hubei Taoma Qianwei Information Technology Co.

Jinwei Mobile Mall is a mall management system for micro-business customers with public numbers. Ltd. Jinwei Mobile Mall has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jinwei Mobile Mall V0.3.8

Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall V0.3.8, which can be exploited by attackers to obtain sensitive information from the database...

Newbee-mall Cross-Site Scripting Vulnerability

newbee-mall is an e-commerce system. A cross-site scripting vulnerability exists in newbee-mall 1.0, where a user only needs to write an xss payload in the address information when purchasing a product, and the vulnerability is triggered when viewing the "View Recipient Information" of the order ...

CVE-2020-23448

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed...

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

Authentication flaw

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed...

CVE-2020-23449

CVE-2020-23449 affects the NewBeeMall e-commerce system across all versions. The root cause is an incorrect access-control mechanism in the component NewBeeMallIndexConfigServiceImpl.java, which can remotely enable privilege escalation and allow unauthorized changes to any user information via us...

CVE-2020-23448

This CVE concerns the NewBee-Mall application where all versions are affected by an incorrect access control flaw in AdminLoginInterceptor.java that allows bypassing authentication for the /admin area, enabling privilege escalation. The root cause is the bypass of the system’s authentication logi...

CVE-2020-23448

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed...

CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office"...

CVE-2020-23447

CVE-2020-23447 affects newbee-mall 1.0 with a cross-site scripting vulnerability in shop-cart/settle. An attacker can inject an XSS payload in the address information during purchase, triggered when viewing the Order Management Office’s “View Recipient Information.” Connected CNVD/CVEs corroborat...

newbee-mall 跨站脚本漏洞

newbee-mall is an e-commerce system. A cross-site scripting vulnerability exists in newbee-mall 1.0, where a user only needs to write an xss payload in the address information when purchasing a product, and the vulnerability is triggered when viewing the "View Recipient Information" of the order ...

newbee-mall Authorization Issues Vulnerability

newbee-mall is an e-commerce system. A security vulnerability exists in newbee-mall that stems from the program being affected by incorrect access controls that cannot be remotely privileged via AdminLoginInterceptor.java. The authentication logic for the system's backend administrator is in the...

Code Execution Vulnerability in the Backend of Ecommerce Power Mall System of Shenzhen Yitongding Multimedia Co.

The business scope of Shenzhen ETD Multimedia Co., Ltd. includes: website construction, mobile WeChat mini-program development, mini-program community group-buying system, VI design, network operation, cloud products-operation and maintenance solutions. There is a code execution vulnerability in...

Arbitrary File Deletion Vulnerability in Jinwei Mobile Mall (CNVD-2021-03384)

The business scope of Hubei Tao code thousand dimensional information science and technology limited company includes: computer software design, development, sales, technical services; system integration and so on. There is an arbitrary file deletion vulnerability in Jinwei Mobile Mall, which can...

Chongqing Fengshengjia E-commerce Co., Ltd. mall CMS exists overstepping the right loophole

The business scope of Chongqing Feng Shengjia E-commerce Co., Ltd. includes: Internet sales, advertising design and agency, software development, enterprise management, etc.. Chongqing Feng Shengjia E-commerce Co., Ltd. mall CMS has an overstepping vulnerability, which can be exploited by attacke...