youlaitech youlai-mall

• CVE-2026-110613 Medium 6.5 youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List 0.4%
• CVE-2026-3287 Medium 6.3 youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection 0.4%
• CVE-2025-15087 Medium 4.3 youlaitech youlai-mall OrderController.java submitOrderPayment improper authorization 0.3%
• CVE-2025-15086 Medium 4.3 youlaitech youlai-mall MemberController.java getMemberByMobile access control 0.3%
• CVE-2025-15085 Medium 4.3 youlaitech youlai-mall Balance MemberController.java deductBalance improper authorization 0.3%
• CVE-2025-15084 Low 3.1 youlaitech youlai-mall Order Payment OrderController.java orderService.payOrder access control 0.3%
• CVE-2025-14086 Medium 6.3 youlaitech youlai-mall openid access control 0.3%
• CVE-2025-14085 Medium 6.3 youlaitech youlai-mall orders improper control of dynamically-identified variables 0.4%
• CVE-2025-14052 Medium 6.3 youlaitech youlai-mall members getMemberById access control 0.3%
• CVE-2025-14051 Medium 6.3 youlaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables 0.5%