Skip to content
OpenAdvisories

Vendor

macrozheng

29 known vulnerabilities.

Products

mall 26 mall-swarm 6
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-109410

    macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation

    A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the component mall-admin/mall-portal. The manipulation leads to incorrect calculat…

    macrozheng mall
  • Low 3.1
    CVE-2026-109407

    macrozheng mall Coupon Redemption generateOrder race condition

    A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redemption. Such manipulation of the argument couponId leads to race condition. The …

    macrozheng mall
  • Low 3.7
    CVE-2026-19361

    macrozheng mall mall-portal getAuthCode password recovery

    A flaw has been found in macrozheng mall 0504e86. This vulnerability affects unknown code of the file /sso/getAuthCode of the component mall-portal Module. Executing a manipulation can lead to weak password recovery. The attack may be launched remotely. This …

    macrozheng mall
  • Low 3.7
    CVE-2025-9514

    macrozheng mall Registration weak password

    A vulnerability has been found in macrozheng mall up to 1.0.3. This impacts an unknown function of the component Registration. Such manipulation leads to weak password requirements. The attack can be executed remotely. Attacks of this nature are highly comple…

    macrozheng mall
  • Low 2.4
    CVE-2025-8750

    macrozheng mall Add Product Page upload cross site scripting

    A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of the file /minio/upload of the component Add Product Page. The manipulation of the argument File leads to cros…

    macrozheng mall
  • Low 3.7
    CVE-2025-8742

    macrozheng mall Admin Login excessive authentication

    A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation leads to improper restriction of excessive authentication attempts. The a…

    macrozheng mall
  • Low 3.7
    CVE-2025-8741

    macrozheng mall login cleartext transmission

    A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The …

    macrozheng mall
  • Low 3.5
    CVE-2025-8191 Public exploit

    macrozheng mall Swagger UI index.html cross site scripting

    A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scri…

    macrozheng mall