Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

guchengwuyue — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting guchengwuyue. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security vulnerability data specifically for the vendor guchengwuyue, focusing on software flaws and configuration weaknesses associated with their product line. The collection encompasses a wide spectrum of reported issues, ranging from remote code execution and privilege escalation to information disclosure and denial of service, covering the entire historical timeline of public disclosures since the vendor first appeared in security advisories. Users can utilize this resource to track the latest security advisories issued by guchengwuyue, analyze the prevalence and impact of specific weakness classes within their ecosystem, or review the complete vulnerability history of individual products to assess long-term security posture. The data is curated to provide a clear, factual record of known risks without promotional commentary, enabling security professionals and researchers to conduct thorough risk assessments and prioritize remediation efforts effectively. By centralizing these details, the page serves as a comprehensive reference point for understanding the security evolution of guchengwuyue offerings, allowing stakeholders to identify patterns in exploitation trends and evaluate the vendor's responsiveness to critical threats over time. All entries are organized to facilitate efficient searching and filtering, ensuring that relevant information regarding specific products or vulnerability types is readily accessible for immediate analysis and decision-making processes.

Top products by guchengwuyue: yshop-crm yshopmall
CVE ID Title CVSS Severity Published
CVE-2026-111703 yshop-crm through 2.1.3 IDOR via CRM customer by-id endpoints — yshop-crm CWE-639 6.3 Medium 2026-10-16
CVE-2026-110120 yshopmall through 2.0.0 IDOR via After-Sales API in StoreAfterSalesController — yshopmall CWE-639 5.4 Medium 2026-10-13
CVE-2026-110119 yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController — yshopmall CWE-639 7.1 High 2026-10-13
CVE-2026-109173 yshop-crm through 2.1.3 Missing Authorization via invoice check endpoint — yshop-crm CWE-862 4.3 Medium 2026-10-12
CVE-2026-109171 yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/check — yshop-crm CWE-862 4.3 Medium 2026-10-12
CVE-2026-109172 yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint — yshop-crm CWE-862 4.3 Medium 2026-10-12
CVE-2026-92463 yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing — yshop-crm CWE-862 6.5 Medium 2026-09-16
CVE-2026-92462 yshop-crm through 2.1.3 Missing Authorization via CrmFlowController deleteFlowStep — yshop-crm CWE-862 6.5 Medium 2026-09-16
CVE-2026-92461 yshop-crm through 2.1.3 Missing Authorization via CRM Approval-Chain Endpoint — yshop-crm CWE-862 4.3 Medium 2026-09-16
CVE-2026-92460 yshop-crm through 2.1.3 Missing Authorization via CRM Operation-Log Listing — yshop-crm CWE-862 6.5 Medium 2026-09-16
CVE-2026-92459 yshop-crm through 2.1.3 Missing Authorization via CRM Lead-Claim Endpoint — yshop-crm CWE-862 6.5 Medium 2026-09-16
CVE-2026-92458 yshop-crm through 2.1.3 Missing Authorization via StoreProductController onSale — yshop-crm CWE-862 4.3 Medium 2026-09-16
CVE-2026-92457 yshop-crm through 2.1.3 Missing Authorization via CrmInvoiceController issueInvoice — yshop-crm CWE-862 6.5 Medium 2026-09-16
CVE-2026-92456 yshop-crm through 2.1.3 Missing Authorization via CRM Customer Rule-Configuration Endpoints — yshop-crm CWE-862 7.1 High 2026-09-16
CVE-2026-92455 yshop-crm through 2.1.3 Missing Authorization via CRM Customer Messaging Endpoints — yshop-crm CWE-862 4.3 Medium 2026-09-16
CVE-2026-2146 guchengwuyue yshopmall co.yixiang.utils.FileUtil updateAvatar unrestricted upload — yshopmall CWE-434 6.3 Medium 2026-02-08
CVE-2025-15496 guchengwuyue yshopmall jobs getPage sql injection — yshopmall CWE-89 6.3 Medium 2026-01-09

This page lists every published CVE security advisory associated with guchengwuyue. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.