Newbee-Mall Project: >> Newbee-Mall Security Vulnerabilities
newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID.
CVSS Score
7.5
EPSS Score
0.002
Published
2021-01-26
main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall (aka New Bee) before 2019-10-23 allows search?goodsCategoryId=&keyword= SQL Injection.
CVSS Score
9.8
EPSS Score
0.006
Published
2019-11-18
Page 2