TI-2026-01796 CVE-2026-2146 · GHSA-9xgc-j99m-jvr5
guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload
Priority MEDIUM 57
A security flaw has been discovered in guchengwuyue yshopmall up to 1.9.1.
Vulnerabilities
4 records
TI-2025-14135 CVE-2025-15496 · GHSA-c99x-xcf4-fhgm
guchengwuyue yshopmall jobs getPage sql injection
Priority MEDIUM 57
A vulnerability was determined in guchengwuyue yshopmall up to 1.9.1.
TI-2025-18995 CVE-2025-25426 · GHSA-gw6p-x6cw-424r
yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.
Priority HIGH 67
yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.
TI-2024-34061 CVE-2024-50648 · GHSA-g4f9-hf22-85j8
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even…
Priority HIGH 82
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.