Skip to contentYoulaitech Youlai-mall vulnerabilities
- youlaitech youlai-mallyoulai-mall through commit 9f62de8 Order Information Disclosure via App Order ListCVE-2026-1106137.1 High
- youlai youlai-mallyoulaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injectionCVE-2026-32875.3 Medium
- youlai youlai-mallyoulaitech youlai-mall OrderController.java submitOrderPayment improper authorizationCVE-2025-150875.3 Medium
- youlai youlai-mallyoulaitech youlai-mall MemberController.java getMemberByMobile access controlCVE-2025-150865.3 Medium
- youlai youlai-mallyoulaitech youlai-mall Balance MemberController.java deductBalance improper authorizationCVE-2025-150855.3 Medium
- youlai youlai-mallyoulaitech youlai-mall Order Payment OrderController.java orderService.payOrder access controlCVE-2025-150842.3 Low
- youlai youlai-mallyoulaitech youlai-mall openid access controlCVE-2025-140865.3 Medium
- youlai youlai-mallyoulaitech youlai-mall orders improper control of dynamically-identified variablesCVE-2025-140855.3 Medium
- youlai youlai-mallyoulaitech youlai-mall members getMemberById access controlCVE-2025-140525.3 Medium
- youlai youlai-mallyoulaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variablesCVE-2025-140515.3 Medium