linlinjava

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

linlinjava records in CISA KEV

No linlinjava vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Litemall 11 records HIGH

Records

17 records

TI-2026-07709 CVE-2026-8771 · GHSA-cvwm-vwhp-22jx

linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection

HIGH 70

A security flaw has been discovered in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00259 Published 2026-05-17 No fix listed CWE-74

TI-2024-16081 CVE-2024-24323 · GHSA-hpw7-mvmj-35m8

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to…

HIGH 67

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java compo…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00719 Published 2024-02-27 No fix listed CWE-89

TI-2024-30950 CVE-2024-46382 · GHSA-hrf5-p85w-hh83

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to…

HIGH 66

A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00626 Published 2024-09-19 No fix listed CWE-89

TI-2026-67706 CVE-2026-105237 · GHSA-xf6v-w5fp-chqr

Improper restriction of login attempts in linlinjava litemall

MEDIUM 61

A vulnerability was detected in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00405 Published 2026-10-05 No fix listed CWE-307

TI-2025-08238 CVE-2025-8991 · GHSA-vc3r-7jmf-9fx4

linlinjava litemall Business Logic express logic error

MEDIUM 57

A vulnerability was identified in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00366 Published 2025-08-15 No fix listed CWE-840

TI-2025-08212 CVE-2025-8965 · GHSA-48hv-6754-x93x

linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload

MEDIUM 57

A vulnerability has been found in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00413 Published 2025-08-14 No fix listed CWE-284

TI-2025-08018 CVE-2025-8764 · GHSA-4fj3-hvj6-pj6h

linlinjava litemall upload unrestricted upload

MEDIUM 57

A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2025-08-09 No fix listed CWE-284

TI-2025-08007 CVE-2025-8753 · GHSA-m79g-crvq-57hp

linlinjava litemall File delete path traversal

MEDIUM 57

A vulnerability, which was classified as critical, has been found in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00562 Published 2025-08-09 No fix listed CWE-22

TI-2025-06086 CVE-2025-6702 · GHSA-jcg7-h3pf-wrm2

linlinjava litemall post improper authorization

MEDIUM 57

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2025-06-26 No fix listed CWE-266

TI-2024-05989 CVE-2024-6452 · GHSA-x4qp-j8r7-f2wx

linlinjava litemall AdminGoodscontroller.java sql injection

MEDIUM 57

A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00475 Published 2024-07-02 No fix listed CWE-89

TI-2026-07711 CVE-2026-8773 · GHSA-34wv-75jw-6v6p

linlinjava litemall Database Setting DbUtil.java load argument injection

MEDIUM 56

A security vulnerability has been detected in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00244 Published 2026-05-18 No fix listed CWE-74

TI-2026-07710 CVE-2026-8772 · GHSA-5x7m-fp78-pgfp

linlinjava litemall Admin Endpoint sql injection

MEDIUM 56

A weakness has been identified in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00206 Published 2026-05-17 No fix listed CWE-74

TI-2018-13034 CVE-2018-18434 · GHSA-54j3-v48h-cjxv

An issue was discovered in litemall 0.9.0.

LOW 37

An issue was discovered in litemall 0.9.0.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02352 Published 2018-10-17 No fix listed CWE-22

TI-2025-08221 CVE-2025-8974 · GHSA-fwvg-rm9j-mp24

linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials

LOW 29

A vulnerability was determined in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00585 Published 2025-08-14 No fix listed CWE-259

TI-2025-09445 CVE-2025-10291 · GHSA-5cp9-2c98-7cqm

linlinjava litemall cancel WxAftersaleController improper authorization

LOW 24

A weakness has been identified in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00348 Published 2025-09-12 No fix listed CWE-266

TI-2026-61584 CVE-2026-90570 · GHSA-3xv5-8pf6-5753

linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting

LOW 22

A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00368 Published 2026-09-13 No fix listed CWE-79

TI-2026-61583 CVE-2026-90569 · GHSA-pj36-c4f6-677h

linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting

LOW 22

A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00368 Published 2026-09-13 No fix listed CWE-79

Open these records in search →