Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

youlai-mall — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in youlai-mall, with AI-generated Chinese analysis, references, and POCs.

Vendor: youlaitech

CVE ID Title CVSS Severity Published
CVE-2026-110613 youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List CWE-639 6.5 Medium 2026-10-14
CVE-2026-3287 youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection CWE-89 6.3 Medium 2026-02-27
CVE-2025-15087 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization CWE-285 4.3 Medium 2025-12-25
CVE-2025-15086 youlaitech youlai-mall MemberController.java getMemberByMobile access control CWE-284 4.3 Medium 2025-12-25
CVE-2025-15085 youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization CWE-285 4.3 Medium 2025-12-25
CVE-2025-15084 youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control CWE-284 3.1 Low 2025-12-25
CVE-2025-14086 youlaitech youlai-mall openid access control CWE-284 6.3 Medium 2025-12-05
CVE-2025-14085 youlaitech youlai-mall orders improper control of dynamically-identified variables CWE-914 6.3 Medium 2025-12-05
CVE-2025-14052 youlaitech youlai-mall members getMemberById access control CWE-284 6.3 Medium 2025-12-05
CVE-2025-14051 youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables CWE-914 6.3 Medium 2025-12-04

All 10 known CVE vulnerabilities affecting youlai-mall with full Chinese analysis, references, and POCs where available.