Newbee-mall Project Newbee-mall 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:newbee-mall_project:newbee-mall:1.0:*:*:*:*:*:*:*part: a version: 1.0 update: *
| Vendor | Newbee Mall Project (67f4d534-ed5d-5893-a2f9-f53b46974944) |
|---|---|
| Product | Newbee Mall (663c1ee1-4fb6-5fc5-b719-0a69c9fc64ad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/newbee-ltd/newbee-mall |
purl2cpe | 2026-06-01 10:13:48.147679 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-4259 |
vulnerable | 2026-06-08 07:29:15.939058 |
newbee-mall UploadController.java upload unrestricted upload
MEDIUM (6.3)
A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/newbee/mall/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Published: 2025-05-05T02:00:05.736Z
Updated: 2025-05-05T13:54:10.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1114 |
vulnerable | 2026-06-08 07:06:36.950246 |
newbee-mall Add Category Page save cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the component Add Category Page. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Published: 2025-02-07T22:31:04.425Z
Updated: 2025-02-10T17:16:22.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10423 |
vulnerable | 2026-06-08 07:02:26.843887 |
newbee-mall kaptcha mallKaptcha Captcha
LOW (3.7)
A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been made public and could be used.
Published: 2025-09-15T03:02:05.834Z
Updated: 2025-09-15T17:10:21.301Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-48178 |
vulnerable | 2026-06-08 06:48:13.659788 |
Details available
newbee-mall v1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via the goodsCoverImg parameter.
Published: 2024-10-28T00:00:00.000Z
Updated: 2024-10-30T17:38:26.747Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27477 |
vulnerable | 2026-06-08 05:41:55.302859 |
Details available
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit.
Published: 2022-04-10T21:01:39.000Z
Updated: 2024-08-03T05:25:32.717Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23447 |
vulnerable | 2026-06-08 05:22:31.916719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.