Skip to contentNewbee-mall Project Newbee-mall vulnerabilities
- newbee-ltd newbee-mallnewbee-mall Unsalted MD5 Password Hashing Enables Offline Credential CrackingCVE-2026-262199.3 Critical
- newbee-ltd newbee-mallnewbee-mall Default Seeded Administrator Credentials Allow Account TakeoverCVE-2026-262189.3 Critical
- newbee-ltd newbee-mallnewbee-mall kaptcha mallKaptcha CaptchaCVE-2025-104236.3 Medium
- newbee-ltd newbee-mallnewbee-mall Order Status paySuccess improper authorizationCVE-2025-104225.3 Medium
- newbee-ltd newbee-mallnewbee-mall UploadController.java upload unrestricted uploadCVE-2025-42595.3 Medium
- newbee-ltd newbee-mallnewbee-mall Add Category Page save cross site scriptingCVE-2025-11145.1 Medium
- newbee-mall project newbee-mallnewbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg...CVE-2024-481788.1 High
- newbee-mall project newbee-mallInsecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows...CVE-2023-302165.4 Medium
- newbee-mall project newbee-mallNewbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at ...CVE-2022-274779.8 Critical
- newbee-mall project newbee-mallA cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows...CVE-2022-274766.1 Medium
- newbee-mall project newbee-mallnewbee-mall all versions are affected by incorrect access control to remotely gain privileges...CVE-2020-234497.5 High
- newbee-mall project newbee-mallnewbee-mall all versions are affected by incorrect access control to remotely gain privileges...CVE-2020-234489.8 Critical
- newbee-mall project newbee-mallnewbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write...CVE-2020-234476.1 Medium
- newbee-mall project newbee-mallmain/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall (aka New Bee) before 2019-10-23...CVE-2019-191139.8 Critical