Issues

Search results

SysRoleController.java:updateRoleStatus未鉴权，可能导致普通用户也能随意调整角色启用/禁用状态

#125 In youlaitech/youlai-mall;

· old6ma openedon May 14, 2025

SysUserController.java:importUsers未鉴权，可能导致普通用户向数据库导入用户数据

#124 In youlaitech/youlai-mall;

· old6ma openedon May 14, 2025

SysMenuController.java:updateMenuVisible缺少权限检查

#123 In youlaitech/youlai-mall;

· old6ma openedon Apr 27, 2025

UmsMemberController.java:getMemberPage可能存在权限漏洞

#122 In youlaitech/youlai-mall;

· old6ma openedon Apr 27, 2025

SysRoleController.java:getRoleForm函数未进行权限检查，可能导致非根用户直接访问根角色

#121 In youlaitech/youlai-mall;

· old6ma openedon Apr 16, 2025

SysUserController.java:getUserForm函数未进行权限检查，可能导致通过输入用户id直接访问其他用户信息

#120 In youlaitech/youlai-mall;

· old6ma openedon Apr 16, 2025

[sercurity vulnerability] sql inject

#118 In youlaitech/youlai-mall;

· GatekeeperBuster openedon Apr 29, 2024

asd

#114 In youlaitech/youlai-mall;

· GatekeeperBuster openedon Dec 14, 2023

asd

#113 In youlaitech/youlai-mall;

· GatekeeperBuster openedon Dec 14, 2023

asd

#112 In youlaitech/youlai-mall;

· GatekeeperBuster openedon Dec 14, 2023

ASD

#106 In youlaitech/youlai-mall;

· GatekeeperBuster openedon May 5, 2023

asd

#105 In youlaitech/youlai-mall;

· GatekeeperBuster openedon May 5, 2023