Browse CVEs

CRITICAL 9.8 CVE-2026-26218 newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned with a predictable defau… Newbee Mall after 1.0.0 Fix from $2,3002026-02-12 CRITICAL 9.1 CVE-2026-26219 newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorporate per-user salts or com… Newbee Mall after 1.0.0 Fix from $2,3002026-02-12 CRITICAL 9.8 CVE-2025-4259 A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/n… Newbee Mall No fix yet Fix from $2,3002025-05-05 MEDIUM 5.4 CVE-2025-1114 A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the … Newbee Mall No fix yet Fix from $1,6002025-02-07 HIGH 8.1 CVE-2024-48178 newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter. Newbee Mall No fix yet Fix from $1,9502024-10-28 MEDIUM 5.4 CVE-2023-30216 Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user account information. Newbee Mall 2022-10-27+ Fix from $1,6002023-05-04 CRITICAL 9.8 CVE-2022-27477 Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit. Newbee Mall No fix yet Fix from $2,3002022-04-10 MEDIUM 6.1 CVE-2022-27476 A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via… Newbee Mall No fix yet Fix from $1,6002022-04-10 CRITICAL 9.8 CVE-2020-23448 newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication … Newbee Mall No fix yet Fix from $2,3002021-01-26 HIGH 7.5 CVE-2020-23449 newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthor… Newbee Mall Patch available Fix from $1,9502021-01-26 MEDIUM 6.1 CVE-2020-23447 newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buyin… Newbee Mall No fix yet Fix from $1,6002021-01-26 CRITICAL 9.8 CVE-2019-19113 main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall (aka New Bee) before 2019-10-23 allows search?goodsCategoryId=&keyword= SQL Injection. Newbee Mall 2019-10-23+ Fix from $2,3002019-11-18