Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: linlinjava Component: Litemall Clear all filters
TI-2025-08018 CVE-2025-8764 · GHSA-4fj3-hvj6-pj6h

linlinjava litemall upload unrestricted upload

Priority MEDIUM 57

A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2025-08-09 No fix listed CWE-284
TI-2025-08007 CVE-2025-8753 · GHSA-m79g-crvq-57hp

linlinjava litemall File delete path traversal

Priority MEDIUM 57

A vulnerability, which was classified as critical, has been found in linlinjava litemall up to 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00562 Published 2025-08-09 No fix listed CWE-22
TI-2025-06086 CVE-2025-6702 · GHSA-jcg7-h3pf-wrm2

linlinjava litemall post improper authorization

Priority MEDIUM 57

A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2025-06-26 No fix listed CWE-266
TI-2024-16081 CVE-2024-24323 · GHSA-hpw7-mvmj-35m8

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to…

Priority HIGH 67

SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java compo…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00719 Published 2024-02-27 No fix listed CWE-89