Jing

#13932of 60,574
22.9Total CVSS
Vulnerabilities · 4
Medium
4
PT-2025-10091
2025-03-07
5.5
CVE-2025-2089
Starsea99
Starsea99 Starsea-Mall
A critical issue has been found, affecting the function `updateUserInfo` of the file `/personal/updateInfo` in the component `com.siro.mall.controller.mall.UserController`. The manipulation of the argument `userId` leads to improper access controls. This issue can be exploited remotely. The exploit has been disclosed to the public and may be used.
PT-2024-39839
2024-10-10
5.8
CVE-2024-9788
Unknown
Lylme Spage
A critical issue has been found in the code of the file /admin/tag.php, where the manipulation of the `id` argument leads to SQL injection. This issue can be initiated remotely.
PT-2024-39840
2024-10-10
5.8
CVE-2024-9789
Unknown
Lylme Spage
A critical issue affects the processing of the file /admin/apply.php. The manipulation of the `id` argument leads to SQL injection. The attack can be initiated remotely.
PT-2024-39841
2024-10-10
5.8
CVE-2024-9790
Unknown
Lylme Spage
A critical issue was found in LyLme spage, affecting an unknown function of the file /admin/sou.php. The manipulation of the `id` argument leads to SQL injection. This issue can be exploited remotely.