Known Vulnerabilities for products from Newbee-mall Project
Listed below are 11 of the newest known vulnerabilities associated with the vendor "Newbee-mall Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-26219 json | newbee-mall stores and verifies user passwords using an unsalted MD5 hashing algorithm. The implementation does not incorpora... | Not Provided | 2026-02-12 | 2026-07-14 |
| CVE-2026-26218 json | newbee-mall includes pre-seeded administrator accounts in its database initialization script. These accounts are provisioned ... | Not Provided | 2026-02-12 | 2026-07-14 |
| CVE-2025-10423 json | A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The mani... | Not Provided | 2025-09-15 | 2026-04-29 |
| CVE-2025-10422 json | A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function... | Not Provided | 2025-09-15 | 2026-04-29 |
| CVE-2023-30216 json | Insecure permissions in the updateUserInfo function of newbee-mall before commit 1f2c2dfy allows attackers to obtain user acc... | 5.4 - MEDIUM | 2023-05-04 | 2023-05-11 |
| CVE-2022-27477 json | Newbee-Mall v1.0.0 was discovered to contain an arbitrary file upload via the Upload function at /admin/goods/edit. | 9.8 - CRITICAL | 2022-04-10 | 2022-04-15 |
| CVE-2022-27476 json | A cross-site scripting (XSS) vulnerability at /admin/goods/update in Newbee-Mall v1.0.0 allows attackers to execute arbitrary... | 6.1 - MEDIUM | 2022-04-10 | 2022-04-20 |
| CVE-2020-23449 json | newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigSe... | 7.5 - HIGH | 2021-01-26 | 2021-07-21 |
| CVE-2020-23448 json | newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.j... | 9.8 - CRITICAL | 2021-01-26 | 2021-07-21 |
| CVE-2020-23447 json | newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their addres... | 6.1 - MEDIUM | 2021-01-26 | 2021-01-30 |
| CVE-2019-19113 json | main/resources/mapper/NewBeeMallGoodsMapper.xml in newbee-mall (aka New Bee) before 2019-10-23 allows search?goodsCategoryId=... | 9.8 - CRITICAL | 2019-11-18 | 2019-12-03 |
Known software with vulnerabilities from Newbee-mall Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Newbee-mall Project | Newbee-mall | 1.0 |