LI
Vendor
linlinjava
17
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105237 | LI litemall linlinjava | 3.7 | Oct 5 | linlinjava litemall Login Endpoint AdminAuthController.java excessive authentication |
| CVE-2026-90570 | LI litemall linlinjava | 2.4 | Sep 13 | linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting |
| CVE-2026-90569 | LI litemall linlinjava | 2.4 | Sep 13 | linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting |
| CVE-2026-8773 | LI litemall linlinjava | 4.7 | May 18 | linlinjava litemall Database Setting DbUtil.java load argument injection |
| CVE-2026-8772 | LI litemall linlinjava | 4.7 | May 17 | linlinjava litemall Admin Endpoint sql injection |
| CVE-2026-8771 | LI litemall linlinjava | 7.3 | May 17 | linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injection |
| CVE-2025-10291 | LI litemall linlinjava | 8.8 | Sep 12 | linlinjava litemall cancel WxAftersaleController improper authorization |
| CVE-2025-8991 | LI litemall linlinjava | 4.3 | Aug 15 | linlinjava litemall Business Logic express logic error |
| CVE-2025-8974 | LI litemall linlinjava | 9.8 | Aug 14 | linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials |
| CVE-2025-8965 | LI litemall linlinjava | 8.8 | Aug 14 | linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload |
| CVE-2025-8764 | LI litemall linlinjava | 5.4 | Aug 9 | linlinjava litemall upload unrestricted upload |
| CVE-2025-8753 | LI litemall linlinjava | 5.4 | Aug 9 | linlinjava litemall File delete path traversal |
| CVE-2025-6702 | LI litemall linlinjava | 5.3 | Jun 26 | linlinjava litemall post improper authorization |
| CVE-2024-46382 | LI Litemall Linlinjava | 7.5 | Sep 19 | A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in… |
| CVE-2024-6452 | LI Litemall Linlinjava | 8.8 | Jul 2 | A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0 |
| CVE-2024-24323 | LI Litemall Linlinjava | 7.2 | Feb 27 | SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray… |
| CVE-2018-18434 | LI Litemall Linlinjava | 7.5 | Oct 17 | An issue was discovered in litemall 0.9.0 |