Search results

GeetestLib 存在未编码用户输入导致的 HTTP 参数注入漏洞 (CWE-74)

Status: Open.

#102 In Exrick/xmall;

· weaver4VD opened on Mar 15, 2026

XSS Injection Vulnerability Report

Status: Open.

#101 In Exrick/xmall;

· YLChen-007 opened on Nov 5, 2025

Broken Access Control - Unauthorized Access to Other Users' Orders

Status: Open.

#100 In Exrick/xmall;

· YLChen-007 opened on Nov 4, 2025

Avatar upload lets one user overwrite another’s profile image

Status: Open.

#99 In Exrick/xmall;

· YLChen-007 opened on Nov 4, 2025

Cart endpoints allow cross-account modifications

Status: Open.

#98 In Exrick/xmall;

· YLChen-007 opened on Nov 4, 2025

There exists a horizontal privilege escalation vulnerability in the xmall project

Status: Open.

#97 In Exrick/xmall;

· 20210607 opened on Feb 18, 2025

There is an Incorrect Access Control vulnerability in xmall

Status: Open.

#96 In Exrick/xmall;

· RacerZ-fighting opened on Nov 23, 2024

[asd

Status: Open.

#95 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023

asd

Status: Open.

#94 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023

asd

Status: Open.

#93 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023

asd

Status: Open.

#92 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023

asd

Status: Open.

#91 In Exrick/xmall;

· GatekeeperBuster opened on Dec 13, 2023