Lennon Chia

**Name of the Vulnerable Software and Affected Versions** newbee-mall (affected versions not specified) **Description** The application includes pre-seeded administrator accounts in its database initialization script, which are provisioned with a predictable default password. Deployments that initialize or reset the database using the provided schema and fail to change these default administrative credentials may allow unauthenticated attackers to log in as an administrator and gain full administrative control of the application. The application’s database contains default admin accounts with predictable passwords. **Recommendations** Change the default administrative credentials to prevent unauthorized access.

**Name of the Vulnerable Software and Affected Versions** newbee-mall (affected versions not specified) **Description** The software stores and verifies user passwords using an unsalted MD5 hashing algorithm. This implementation lacks per-user salts and computational cost controls. Attackers obtaining password hashes through various compromise methods can recover plaintext credentials via offline attacks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DoraCMS versions prior to 3.1 **Description** The software contains a server-side request forgery (SSRF) issue in its UEditor remote image fetch functionality. The application takes user-provided URLs and makes server-side HTTP or HTTPS requests without proper validation or restrictions. The implementation lacks allowlists, blocks for internal IP addresses, and request timeouts or response size limits. An attacker can exploit this to make the server send requests to any host, including internal network resources, potentially allowing network scanning and denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Nome do Software Vulnerável e Versões Afetadas** Versões do macrozheng mall anteriores à 1.0.4 **Descrição** O software contém um problema de autenticação no processo de redefinição de senha. Um atacante não autenticado pode redefinir senhas de contas de usuário usando apenas o número de telefone da vítima. A senha de uso único (OTP) é exposta na resposta da API e as solicitações de redefinição de senha são validadas comparando o OTP fornecido com um valor armazenado por número de telefone, sem verificar a identidade do usuário ou a propriedade do número de telefone. Isso permite a tomada de conta remota de qualquer usuário com um número de telefone conhecido ou previsível. O endpoint de API vulnerável é o fluxo de redefinição de senha dentro do `mall-portal`. A vulnerabilidade explora a falta de verificação da identidade do usuário e da propriedade do número de telefone durante as solicitações de redefinição de senha. **Recomendações** Atualize o macrozheng mall para a versão 1.0.4 ou posterior.