Skip to content
Newbee-mall Project vulnerabilities
Newest
-
newbee-ltd newbee-mall
newbee-mall Unsalted MD5 Password Hashing Enables Offline Credential Cracking
CVE-2026-26219
9.3 Critical
-
newbee-ltd newbee-mall
newbee-mall Default Seeded Administrator Credentials Allow Account Takeover
CVE-2026-26218
9.3 Critical
-
newbee-ltd newbee-mall
newbee-mall kaptcha mallKaptcha Captcha
CVE-2025-10423
6.3 Medium
-
newbee-ltd newbee-mall
newbee-mall Order Status paySuccess improper authorization
CVE-2025-10422
5.3 Medium
-
newbee-ltd newbee-mall
newbee-mall UploadController.java upload unrestricted upload
CVE-2025-4259
5.3 Medium
-
newbee-ltd newbee-mall
newbee-mall Add Category Page save cross site scripting
CVE-2025-1114
5.1 Medium
-
newbee-mall project newbee-mall
newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg...
CVE-2024-48178
8.1 High
-
newbee-mall project newbee-mall
Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows...
CVE-2023-30216
5.4 Medium
-
newbee-mall project newbee-mall
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at ...
CVE-2022-27477
9.8 Critical
-
newbee-mall project newbee-mall
A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows...
CVE-2022-27476
6.1 Medium
-
newbee-mall project newbee-mall
newbee-mall all versions are affected by incorrect access control to remotely gain privileges...
CVE-2020-23449
7.5 High
-
newbee-mall project newbee-mall
newbee-mall all versions are affected by incorrect access control to remotely gain privileges...
CVE-2020-23448
9.8 Critical
-
newbee-mall project newbee-mall
newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write...
CVE-2020-23447
6.1 Medium
-
newbee-mall project newbee-mall
main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall (aka New Bee) before 2019-10-23...
CVE-2019-19113
9.8 Critical