Litemall Security Vulnerabilities and Issues — Litemall CVE List

LinlinjavaLitemall

3 matches found

CVE•added 2024/07/02 8:0 p.m.•49 views

CVE-2024-6452

CVE-2024-6452 affects linlinjava Litemall up to 1.8.0. The vulnerability resides in AdminGoodscontroller.java where manipulating the goodsId/goodsSn/name parameters enables SQL injection. It can be exploited remotely, and public disclosures exist. Connected sources consistently describe the impac...

8.8CVSS6.9AI score0.00475EPSS

CVE•added 2025/08/14 3:32 p.m.•29 views

CVE-2025-8965

CVE-2025-8965 affects linlinjava litemall up to version 1.8.0. The vulnerability is in the create function of AdminStorageController.java (litemall-admin-api) where manipulation of the File argument leads to unrestricted file upload. The attack can be performed remotely and the exploit has been d...

8.8CVSS7.1AI score0.00366EPSS

CVE•added 2025/09/12 5:32 a.m.•20 views

CVE-2025-10291

Affects linlinjava litemall up to 1.8.0. The vulnerability resides in WxAftersaleController at /wx/aftersale/cancel, where manipulating the ID argument can cause improper authorization. Exploitation can be performed remotely, and public exploits exist. Multiple sources confirm the issue and note ...

8.8CVSS6.3AI score0.00313EPSS

Web