Search results

WxFeedbackController中的submit接口疑似存在水平越权漏洞

Status: Open.

#574 In linlinjava/litemall;

· kingkingkingson opened on Jan 22, 2026

WxAuthController中的profile疑似存在水平越权漏洞

Status: Open.

#573 In linlinjava/litemall;

· kingkingkingson opened on Jan 22, 2026

太老了，什么时候切换到springboot3

Status: Open.

#572 In linlinjava/litemall;

· eaglewangy opened on Oct 19, 2025

感谢，测试了三个开源商城，这个是第四个，其它都是引流学习用的，这个是完全可以用的，非常感谢

Status: Open.

#571 In linlinjava/litemall;

· allovine opened on Oct 15, 2025

Hardcoded JWT Secret Vulnerability in Litemall (≤ v1.8.0) (CWE-798)

Status: Open.

#568 In linlinjava/litemall;

· ez-lbz opened on Aug 4, 2025

Stored XSS Vulnerability in /wx/storage/upload (Litemall ≤ v1.8.0)

Status: Open.

#567 In linlinjava/litemall;

· ez-lbz opened on Jul 28, 2025

Logic Vulnerability - express fee

Status: Open.

#566 In linlinjava/litemall;

· NinjaGPT opened on Jul 28, 2025

Unrestricted Upload of File with Dangerous Type (CWE-434)

Status: Open.

#565 In linlinjava/litemall;

· NinjaGPT opened on Jul 28, 2025

Arbitrary File Deletion Vulnerability in /admin/storage/delete

Status: Open.

#564 In linlinjava/litemall;

· ez-lbz opened on Jul 28, 2025

Captcha Brute-force Vulnerability in Litemall (≤ v1.8.0)

Status: Open.

#563 In linlinjava/litemall;

· ez-lbz opened on Jul 28, 2025

旧域名 registry.npm.taobao.org 已停用（2022年5月后失效）

Status: Open.

#561 In linlinjava/litemall;

· misxzaiz opened on Jun 7, 2025

是否应该避免用关键字做字段

Status: Open.

#558 In linlinjava/litemall;

· xieningqing opened on Nov 16, 2024