Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2025/12/29 2:3 p.m.10 views

CVE-2025-15118

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has...

5.3CVSS4.7AI score0.00224EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/12/28 3:2 a.m.33 views

CVE-2025-15118 macrozheng mall Member Endpoint update improper authorization

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This vulnerability affects unknown code of the file /member/address/update/ of the component Member Endpoint. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has...

5.3CVSS0.00224EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/12/28 12:0 a.m.6 views

mall 授权问题漏洞

mall is an e-commerce system for macro individual developers, including frontend mall system and backend management system. An authorization issue vulnerability exists in macrozheng mall 1.0.3 and earlier versions, which stems from incorrect manipulation of the file /member/address/update/, which...

5.3CVSS4.8AI score0.00224EPSS
SaveExploits1References5
OSV
OSV
added 2018/03/22 4:29 a.m.5 views

CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

6.1CVSS5.8AI score0.00707EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2018/03/22 4:29 a.m.1 views

CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

6.1CVSS5.4AI score0.00707EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2018/03/22 4:0 a.m.21 views

CVE-2018-8906

dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index.php/home/memberaddress/edit/addressid/2.html...

6AI score0.00707EPSS
SaveExploits1References1
Rows per page
Query Builder