Filtered by vendor Guchengwuyue Subscriptions
Filtered by product Yshopmall Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-50648 2 Guchengwuyue, Yshopmall 2 Yshopmall, Yshopmall 2025-06-17 9.8 Critical
yshopmall V1.0 has an arbitrary file upload vulnerability, which can enable RCE or even take over the server when improperly configured to parse JSP files.
CVE-2025-25426 1 Guchengwuyue 1 Yshopmall 2025-06-12 7.2 High
yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.