Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2022-27477
Disclosure Date: April 10, 2022 (last updated October 07, 2023)
Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit.
0
Attacker Value
Unknown
CVE-2022-27476
Disclosure Date: April 10, 2022 (last updated October 07, 2023)
A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the goodsName parameter.
0
Attacker Value
Unknown
CVE-2020-23447
Disclosure Date: January 26, 2021 (last updated February 22, 2025)
newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View Recipient Information" of this order in "Order Management Office".
0
