CVE-2025-15084

A vulnerability was identified in youlaitech youlai-mall 1.0.0/2.0.0. The impacted element is the function orderService.payOrder of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java of the component Order Payment Handler. The manipulation leads to...

PT-2023-16855 · Unknown · Sul1Ss Shop

Name of the Vulnerable Software and Affected Versions: SUL1SS shop affected versions not specified Description: A critical issue has been found in SUL1SS shop, affecting the file applicationmerchcontrollerOrder.php. The manipulation of the keyword argument leads to SQL injection. The attack can b...

SQL Injection Vulnerability in ShopsN v2.0 Frontend OrderController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end OrderController.class.php file SQL injection vulnerability. The vulnerability is due to the system fails to effectively filter the data submitted by the user . An attacker can exploit this vulnerability ...