Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-46382
7.5
HIGHCVSS v3
Published
September 19, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A SQL injection vulnerability in linlinjava litemall 1.8.0 allows a remote attacker to obtain sensitive information via the goodsId, goodsSn, and name parameters in AdminOrderController.java.
linlinjava/litemall
GitHub又一个小商城。litemall = Spring Boot后端 + Vue管理员前端 + 微信小程序用户前端 + Vue用户移动端
GitHub又一个小商城。litemall = Spring Boot后端 + Vue管理员前端 + 微信小程序用户前端 + Vue用户移动端= 1.8.0NVD