Litemall

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjava/litemall/wx/web/WxStorageController.java in the litemall-w…CVE-2018-18434Linlinjava · 2.4% likely

   CWE-22

2. SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consignee, orderSN, orderStatusArray paramete…CVE-2024-24323Linlinjava · CVSS 7.2 · 0.7% likely

   CWE-89

3. A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderCont…CVE-2024-46382Linlinjava · CVSS 6.5 · 0.6% likely

   CWE-89

4. linlinjava litemall File delete path traversalCVE-2025-8753linlinjava · CVSS 5.4 · 0.6% likely

   CWE-22

5. linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentialsCVE-2025-8974linlinjava · CVSS 3.7 · 0.6% likely

   CWE-259

6. linlinjava litemall AdminGoodscontroller.java sql injectionCVE-2024-6452linlinjava · CVSS 6.3 · 0.5% likely

   CWE-89

7. linlinjava litemall Endpoint AdminStorageController.java create unrestricted uploadCVE-2025-8965linlinjava · CVSS 6.3 · 0.4% likely

   CWE-434

8. linlinjava litemall Login Endpoint AdminAuthController.java excessive authenticationCVE-2026-105237linlinjava · CVSS 3.7 · 0.4% likely

   CWE-307

9. linlinjava litemall post improper authorizationCVE-2025-6702linlinjava · CVSS 4.3 · 0.4% likely

   CWE-266

10. linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scriptingCVE-2026-90570linlinjava · CVSS 2.4 · 0.4% likely

    CWE-79

11. linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scriptingCVE-2026-90569linlinjava · CVSS 2.4 · 0.4% likely

    CWE-79

12. linlinjava litemall Business Logic express logic errorCVE-2025-8991linlinjava · CVSS 4.3 · 0.4% likely

    CWE-840

13. linlinjava litemall cancel WxAftersaleController improper authorizationCVE-2025-10291linlinjava · CVSS 6.3 · 0.4% likely

    CWE-266

14. linlinjava litemall upload unrestricted uploadCVE-2025-8764linlinjava · CVSS 6.3 · 0.3% likely

    CWE-434

15. linlinjava litemall Front-end WeChat API WxGoodsController.java list sql injectionCVE-2026-8771linlinjava · CVSS 7.3 · 0.3% likely

    CWE-89

16. linlinjava litemall Database Setting DbUtil.java load argument injectionCVE-2026-8773linlinjava · CVSS 4.7 · 0.2% likely

    CWE-88

17. linlinjava litemall Admin Endpoint sql injectionCVE-2026-8772linlinjava · CVSS 4.7 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.