Vulnerability index

Browse CVEs

7 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Newbee Mall CRITICAL 9.8
CVE-2025-4259

A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/n…

No fix yet
Fix from $2,300 2025-05-05
Newbee Mall MEDIUM 5.4
CVE-2025-1114

A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the …

No fix yet
Fix from $1,600 2025-02-07
Newbee Mall HIGH 8.1
CVE-2024-48178

newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter.

No fix yet
Fix from $1,950 2024-10-28
Newbee Mall CRITICAL 9.8
CVE-2022-27477

Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit.

No fix yet
Fix from $2,300 2022-04-10
Newbee Mall MEDIUM 6.1
CVE-2022-27476

A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via…

No fix yet
Fix from $1,600 2022-04-10
Newbee Mall CRITICAL 9.8
CVE-2020-23448

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication …

No fix yet
Fix from $2,300 2021-01-26
Newbee Mall MEDIUM 6.1
CVE-2020-23447

newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buyin…

No fix yet
Fix from $1,600 2021-01-26