Linlinjava Litemall 1.8.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:linlinjava:litemall:1.8.0:*:*:*:*:*:*:*

part: a version: 1.8.0 update: *

VendorLinlinjava (13928618-426d-554b-89aa-218636738dc2)
ProductLitemall (61f5cdf2-eab9-57ae-ab83-357c59f79a64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gitee/linlinjava/litemall purl2cpe 2026-11-03 09:58:25.033247
pkg:github/linlinjava/litemall purl2cpe 2026-11-03 09:58:25.033249

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6702 vulnerable 2026-06-08 07:43:15.924207 linlinjava litemall post improper authorization
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-06-26T16:00:16.356Z
Updated: 2025-06-27T13:18:23.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-46382 vulnerable 2026-06-08 06:48:10.050836 Details available
A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java.
Published: 2024-09-19T00:00:00.000Z
Updated: 2026-04-29T10:32:15.992Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.