Guchengwuyue Yshopmall vulnerabilities
- guchengwuyue yshopmallyshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController5.3 Medium
- guchengwuyue yshopmallyshopmall through 2.0.0 IDOR via Member Address API in UserAddressController7.1 High
- guchengwuyue yshopmallguchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload5.3 Medium
- guchengwuyue yshopmallguchengwuyue yshopmall jobs getPage sql injection5.3 Medium
- guchengwuyue yshopmallyshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.7.2 High
- guchengwuyue yshopmallyshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over...9.8 Critical