linlinjava records
11 published records for vendor linlinjava.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-266 Incorrect Privilege Assignment2
- CWE-284 Improper Access Control2
- CWE-259 Use of Hard-coded Password1
- CWE-840 Business Logic Errors1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2018-18434No exploit | An issue was discovered in litemall 0.9.0.linlinjava · litemall · CWE-22 | High7.5 | — | 2.4% | Oct 17, 2018 |
30Monitor | CVE-2024-46382No exploit | A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSnlinlinjava · litemall · CWE-89 | High7.5 | — | 0.6% | Sep 19, 2024 |
28Monitor | CVE-2024-24323No exploit | SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consiglinlinjava · litemall · CWE-89 | High7.2 | — | 0.7% | Feb 27, 2024 |
21Monitor | CVE-2024-6452No exploit | linlinjava litemall AdminGoodscontroller.java sql injectionlinlinjava · litemall · CWE-89 | Medium5.3 | — | 0.5% | Jul 2, 2024 |
11Monitor | CVE-2025-8974No exploit | linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentialslinlinjava · litemall · CWE-259 | Low2.9 | — | 0.5% | Aug 14, 2025 |
8Monitor | CVE-2025-8753No exploit | linlinjava litemall File delete path traversallinlinjava · litemall · CWE-22 | Low2.1 | — | 0.5% | Aug 9, 2025 |
8Monitor | CVE-2025-6702No exploit | linlinjava litemall post improper authorizationlinlinjava · litemall · CWE-266 | Low2.1 | — | 0.4% | Jun 26, 2025 |
8Monitor | CVE-2025-8965No exploit | linlinjava litemall Endpoint AdminStorageController.java create unrestricted uploadlinlinjava · litemall · CWE-284 | Low2.1 | — | 0.4% | Aug 14, 2025 |
8Monitor | CVE-2025-10291No exploit | linlinjava litemall cancel WxAftersaleController improper authorizationlinlinjava · litemall · CWE-266 | Low2.1 | — | 0.3% | Sep 12, 2025 |
8Monitor | CVE-2025-8991No exploit | linlinjava litemall Business Logic express logic errorlinlinjava · litemall · CWE-840 | Low2.1 | — | 0.3% | Aug 14, 2025 |
8Monitor | CVE-2025-8764No exploit | linlinjava litemall upload unrestricted uploadlinlinjava · litemall · CWE-284 | Low2.1 | — | 0.2% | Aug 9, 2025 |
- CVE-2018-1843431Monitor
An issue was discovered in litemall 0.9.0.
HighCVSS 7.5No exploitEPSS 2%linlinjava · litemallOct 17, 2018
- CVE-2024-4638230Monitor
A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn
HighCVSS 7.5No exploitEPSS 1%linlinjava · litemallSep 19, 2024
- CVE-2024-2432328Monitor
SQL injection vulnerability in linlinjava litemall v.1.8.0 allows a remote attacker to obtain sensitive information via the nickname, consig
HighCVSS 7.2No exploitEPSS 1%linlinjava · litemallFeb 27, 2024
- CVE-2024-645221Monitor
linlinjava litemall AdminGoodscontroller.java sql injection
MediumCVSS 5.3No exploitEPSS 0%linlinjava · litemallJul 2, 2024
- CVE-2025-897411Monitor
linlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials
LowCVSS 2.9No exploitEPSS 1%linlinjava · litemallAug 14, 2025
- CVE-2025-87538Monitor
linlinjava litemall File delete path traversal
LowCVSS 2.1No exploitEPSS 1%linlinjava · litemallAug 9, 2025
- CVE-2025-67028Monitor
linlinjava litemall post improper authorization
LowCVSS 2.1No exploitEPSS 0%linlinjava · litemallJun 26, 2025
- CVE-2025-89658Monitor
linlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
LowCVSS 2.1No exploitEPSS 0%linlinjava · litemallAug 14, 2025
- CVE-2025-102918Monitor
linlinjava litemall cancel WxAftersaleController improper authorization
LowCVSS 2.1No exploitEPSS 0%linlinjava · litemallSep 12, 2025
- CVE-2025-89918Monitor
linlinjava litemall Business Logic express logic error
LowCVSS 2.1No exploitEPSS 0%linlinjava · litemallAug 14, 2025
- CVE-2025-87648Monitor
linlinjava litemall upload unrestricted upload
LowCVSS 2.1No exploitEPSS 0%linlinjava · litemallAug 9, 2025