Litemall Project vulnerabilities
We track 3 vulnerabilities in Litemall Project products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2024.
Latest Litemall Project vulnerabilities
- 7.5 High severity
litemall: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java.
- 8.8 High severity
litemall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file AdminGoodscontroller.java. The manipulation of the argument goodsId/goodsSn/name leads to sql injection.
- 7.2 High severity
litemall: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray parameters of the AdminOrdercontroller.java component.