VendorsYoulaiyoulai-mall2.0.0
Vulnerabilities

Youlai Youlai-mall 2.0.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2026-3287
youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection
Published 2026-02-27 · Analyzed
9.8EPSS 0.005
CVE-2025-14051
youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables
Published 2025-12-04 · Analyzed
8.8EPSS 0.005
CVE-2025-14085
youlaitech youlai-mall orders improper control of dynamically-identified variables
Published 2025-12-05 · Analyzed
8.8EPSS 0.004
CVE-2025-14086
youlaitech youlai-mall openid access control
Published 2025-12-05 · Analyzed
8.8EPSS 0.003
CVE-2025-15085
youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization
Published 2025-12-25 · Analyzed
8.1EPSS 0.003
CVE-2025-14052
youlaitech youlai-mall members getMemberById access control
Published 2025-12-05 · Analyzed
6.5EPSS 0.003
CVE-2025-15086
youlaitech youlai-mall MemberController.java getMemberByMobile access control
Published 2025-12-25 · Analyzed
4.3EPSS 0.003
CVE-2025-15087
youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization
Published 2025-12-25 · Modified
4.3EPSS 0.003
CVE-2025-15084
youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control
Published 2025-12-25 · Analyzed
3.1EPSS 0.003