Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/12/29 2:03 p.m.•15 views

CVE-2025-15118

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has...

5.3CVSS4.7AI score0.00261EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/12/28 3:02 a.m.•42 views

CVE-2025-15118 macrozheng mall Member Endpoint update improper authorization

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has...

5.3CVSS0.00261EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/12/28 12:00 a.m.•10 views

mall 授权问题漏洞

mall is an e-commerce system for macro individual developers, including frontend mall system and backend management system. An authorization issue vulnerability exists in macrozheng mall 1.0.3 and earlier versions, which stems from incorrect manipulation of the file /member/address/update/, which...

5.3CVSS4.8AI score0.00261EPSS
SaveExploits1References5
OSV
OSV
•added 2018/03/22 4:29 a.m.•11 views

CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

6.1CVSS5.8AI score0.00683EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2018/03/22 4:29 a.m.•3 views

CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

6.1CVSS5.4AI score0.00683EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2018/03/22 4:00 a.m.•29 views

CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

6AI score0.00683EPSS
SaveExploits1References1
Rows per page
Query Builder