CVE-2025-13117
- EPSS 0.3%
- Veröffentlicht 13.11.2025 14:32:06
- Zuletzt bearbeitet 29.04.2026 01:00:01
A security vulnerability has been detected in macrozheng mall-swarm and mall up to 1.0.3. Affected by this vulnerability is the function cancelOrder of the file /order/cancelOrder. The manipulation of the argument orderId leads to improper authorizat...
CVE-2025-13116
- EPSS 0.3%
- Veröffentlicht 13.11.2025 14:15:48
- Zuletzt bearbeitet 29.04.2026 01:00:01
A weakness has been identified in macrozheng mall-swarm and mall up to 1.0.3. Affected is the function cancelUserOrder of the file /order/cancelUserOrder. Executing manipulation of the argument orderId can lead to improper authorization. It is possib...
CVE-2025-13115
- EPSS 0.33%
- Veröffentlicht 13.11.2025 13:32:09
- Zuletzt bearbeitet 29.04.2026 01:00:01
A security flaw has been discovered in macrozheng mall-swarm and mall up to 1.0.3. This impacts the function detail of the file /order/detail/ of the component Order Details Handler. Performing manipulation of the argument orderId results in improper...
CVE-2025-9836
- EPSS 0.29%
- Veröffentlicht 02.09.2025 22:02:07
- Zuletzt bearbeitet 29.04.2026 01:00:01
A vulnerability was found in macrozheng mall up to 1.0.3. This vulnerability affects the function paySuccess of the file /order/paySuccess. The manipulation of the argument orderId results in authorization bypass. The attack can be launched remotely....
CVE-2025-9835
- EPSS 0.33%
- Veröffentlicht 02.09.2025 21:32:06
- Zuletzt bearbeitet 29.04.2026 01:00:01
A vulnerability has been found in macrozheng mall up to 1.0.3. This affects the function cancelOrder of the file /order/cancelUserOrder. The manipulation of the argument orderId leads to authorization bypass. The attack can be initiated remotely. The...
CVE-2025-9514
- EPSS 0.39%
- Veröffentlicht 27.08.2025 06:02:06
- Zuletzt bearbeitet 26.11.2025 16:36:34
A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are high...
CVE-2025-8755
- EPSS 0.53%
- Veröffentlicht 09.08.2025 14:02:05
- Zuletzt bearbeitet 02.09.2025 19:23:47
A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController.java of the component com.macro.mall.portal.controller. The manipulation of the argument or...
CVE-2025-8750
- EPSS 0.28%
- Veröffentlicht 09.08.2025 07:02:06
- Zuletzt bearbeitet 29.04.2026 01:00:01
A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of the file /minio/upload of the component Add Product Page. The manipulation of the argument File lead...
CVE-2025-8742
- EPSS 0.57%
- Veröffentlicht 08.08.2025 22:16:18
- Zuletzt bearbeitet 02.09.2025 19:22:56
A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation leads to improper restriction of excessive authentication attemp...
CVE-2025-8741
- EPSS 0.37%
- Veröffentlicht 08.08.2025 21:32:05
- Zuletzt bearbeitet 29.04.2026 01:00:01
A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive informat...