VendorsLinlinjavalitemallany version
Vulnerabilities

Linlinjava Litemall any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2025-8974
linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials
Published 2025-08-14 · Analyzed
9.8EPSS 0.005
CVE-2024-6452
linlinjava litemall AdminGoodscontroller.java sql injection
Published 2024-07-02 · Analyzed
8.8EPSS 0.005
CVE-2025-8965
linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
Published 2025-08-14 · Analyzed
8.8EPSS 0.004
CVE-2025-10291
linlinjava litemall cancel WxAftersaleController improper authorization
Published 2025-09-12 · Analyzed
8.8EPSS 0.003
CVE-2024-24323
SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component.
Published 2024-02-27 · Analyzed
7.2EPSS 0.007
CVE-2025-8764
linlinjava litemall upload unrestricted upload
Published 2025-08-09 · Analyzed
6.5EPSS 0.002
CVE-2025-8753
linlinjava litemall File delete path traversal
Published 2025-08-09 · Analyzed
5.5EPSS 0.005
CVE-2025-8991
linlinjava litemall Business Logic express logic error
Published 2025-08-15 · Analyzed
4.3EPSS 0.003