Lucene search

K
LinlinjavaLitemall

8 matches found

CVE
CVE
added 2024/09/19 1:15 p.m.37 views

CVE-2024-46382

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminGoodscontroller.java.

7.5CVSS7.4AI score0.00115EPSS
CVE
CVE
added 2024/07/02 8:15 p.m.36 views

CVE-2024-6452

A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file AdminGoodscontroller.java. The manipulation of the argument goodsId/goodsSn/name leads to sql injection. The attack can be launched remotely. T...

6.5CVSS6.9AI score0.00036EPSS
CVE
CVE
added 2025/06/26 4:15 p.m.8 views

CVE-2025-6702

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has be...

5.3CVSS7AI score0.00066EPSS
CVE
CVE
added last week6 views

CVE-2025-8764

A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0. Affected is the function Upload of the file /wx/storage/upload. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed ...

6.5CVSS7.2AI score0.0004EPSS
CVE
CVE
added 2025/08/09 2:15 p.m.5 views

CVE-2025-8753

A vulnerability, which was classified as critical, has been found in linlinjava litemall up to 1.8.0. Affected by this issue is the function delete of the file /admin/storage/delete of the component File Handler. The manipulation of the argument key leads to path traversal. The attack may be launch...

5.5CVSS7.1AI score0.00048EPSS
CVE
CVE
added 2 days ago4 views

CVE-2025-8974

A vulnerability was determined in linlinjava litemall up to 1.8.0. Affected by this issue is some unknown functionality of the file litemall-wx-api/src/main/java/org/linlinjava/litemall/wx/util/JwtHelper.java of the component JSON Web Token Handler. The manipulation of the argument SECRET with the ...

6.3CVSS7AI score0.0003EPSS
CVE
CVE
added 2 days ago3 views

CVE-2025-8965

A vulnerability has been found in linlinjava litemall up to 1.8.0. This vulnerability affects the function create of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminStorageController.java of the component Endpoint. The manipulation of the argument File leads to unre...

6.5CVSS7.1AI score0.00036EPSS
CVE
CVE
added yesterday3 views

CVE-2025-8991

A vulnerability was identified in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file /admin/config/express of the component Business Logic Handler. The manipulation of the argument litemall_express_freight_min leads to business logic errors. The ...

5.3CVSS7.1AI score0.00029EPSS