CVE record · 1 source
CVE-2026-110119
CVSS 7.1Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to…
- CVSS
- 7.1
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to…
Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and delete other members' shipping addresses. Attackers can…