CVE-2025-15087

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of the argument orderSn leads to improper...

CVE-2025-15087

CVE-2025-15087 affects youlaitech youlai-mall versions 1.0.0–2.0.0. The vulnerability is in OrderController.java, submitOrderPayment, where manipulating the orderSn argument leads to improper authorization. Exploit has been publicly disclosed; remote exploitation is possible, with exploit maturit...

CVE-2025-15087 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization

A security vulnerability has been detected in youlaitech youlai-mall 1.0.0/2.0.0. Affected is the function submitOrderPayment of the file mall-oms/oms-boot/src/main/java/com/youlai/mall/oms/controller/app/OrderController.java. Such manipulation of the argument orderSn leads to improper...

Litemall Security Breach

Litemall is an e-commerce system for Linlinjava individual developers. A security vulnerability exists in Litemall v.1.8.0 that allows remote attackers to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component...