📦 Youlai Mall

This vulnerability allows improper authorization in the submitOrderPayment function of youlai-mall, potentially enabling unauthorized order manipulation. Attackers could exploit this remotely to modif...

This vulnerability in youlaitech youlai-mall allows improper access controls via the getMemberByMobile function, enabling unauthorized access to member data. Attackers can exploit this remotely to pot...

This vulnerability allows unauthorized users to manipulate the balance deduction function in youlai-mall e-commerce platform, potentially enabling unauthorized balance modifications or financial fraud...

This vulnerability in youlaitech youlai-mall allows remote attackers to manipulate the orderId parameter in the /app-api/v1/orders/ endpoint, leading to improper control of dynamically-identified vari...

This vulnerability in youlaitech youlai-mall allows attackers to bypass access controls by manipulating the openid parameter in the /app-api/v1/members/openid/ endpoint. Attackers can exploit this rem...

This vulnerability in youlai-mall allows attackers to bypass access controls by manipulating the memberId parameter in the getMemberById function. Attackers can remotely access unauthorized member dat...

This vulnerability in youlaitech youlai-mall allows attackers to manipulate dynamically-identified variables through the getById/updateAddress/deleteAddress functions, potentially leading to unauthori...

This vulnerability in youlaitech youlai-mall allows attackers to bypass access controls in the order payment function, potentially manipulating payment processes. It affects youlai-mall e-commerce pla...