Skip to content
Exrick vulnerabilities
Newest
-
exrick xboot
XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint
CVE-2026-111689
5.3 Medium
-
exrick xboot
Exrick XBoot through 3.3.4 Data-Scope Bypass via openDataFilter Parameter
CVE-2026-111688
5.3 Medium
-
exrick xmall
Exrick xmall Order Printing order-print.jsp cross site scripting
CVE-2026-90571
5.3 Medium
-
exrick xmall
Incorrect access control in the /member/orderList API of xmall v1.1 allows attackers to...
CVE-2023-36331
8.2 High
-
exrick xmall
Multiple Cross-Site Scripting (XSS) vulnerabilities exist in xmall v1.1 due to improper handling...
CVE-2025-65540
6.1 Medium
-
exrick xboot
Exrick xboot getMenuList sensitive information in a cookie
CVE-2025-8528
6.3 Medium
-
exrick xboot
Exrick xboot Swagger SecurityController.java server-side request forgery
CVE-2025-8527
5.3 Medium
-
exrick xboot
Exrick xboot UploadController.java upload unrestricted upload
CVE-2025-8526
5.3 Medium
-
exrick xboot
Exrick xboot Spring Boot Admin/Spring Actuator information disclosure
CVE-2025-8525
6.9 Medium
-
exrick xmall
Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted...
CVE-2025-45612
9.8 Critical
-
exrick xmall
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the...
CVE-2025-28399
9.8 Critical
-
exrick xmall
xmall v1.1 was discovered to contain a SQL injection vulnerability via the orderDir parameter.
CVE-2024-24112
9.8 Critical
-
exrick xmall
A Cross Site Scripting (XSS) vulnerability exists in Exrick XMall Admin Panel as of 11/7/2021 via...
CVE-2021-43432
6.1 Medium