All issues

Search results

Negative Cart Quantity Offsets the Order Total and Inflates the Stock Counter

Status: Open.

#127 In newbee-ltd/newbee-mall;

· czTangt opened on Sep 16, 2026

[Sercuity]新蜂商城（newbee-mall）后台文件上传无后缀白名单，结合图片/HTML多型文件绕过BufferedImage校验，导致存储型XSS。

Status: Open.

#126 In newbee-ltd/newbee-mall;

· rockmelodies opened on Aug 26, 2026

[Security]新蜂商城（newbee-mall）POST /admin/profile/name 缺乏 CSRF 防护，可跨站强制重命名管理员登录用户名，导致管理员被永久锁定

Status: Open.

#125 In newbee-ltd/newbee-mall;

· rockmelodies opened on Aug 26, 2026

[Security]新蜂商城（newbee-mall） GET /admin/logout 接口缺少 CSRF 防护，可被诱导触发强制登出。

Status: Open.

#124 In newbee-ltd/newbee-mall;

· rockmelodies opened on Aug 26, 2026

[Security] Stored XSS in Rich Text Content on the Traditional Product Detail Page

Status: Open.

#122 In newbee-ltd/newbee-mall;

· insung186 opened on Jul 5, 2026

[Security] Stored XSS in Product Detail Rich Text Content

Status: Open.

#121 In newbee-ltd/newbee-mall;

· insung186 opened on Jul 5, 2026

[Security] Unauthenticated Order Payment Status Manipulation via /paySuccess

Status: Open.

#120 In newbee-ltd/newbee-mall;

· geo-chen opened on Jun 3, 2026

Default admin credentials + weak MD5 password hashing enable full admin compromise and credential cracking

Status: Open.

#119 In newbee-ltd/newbee-mall;

· 13ernkastel opened on Feb 12, 2026

Experimenting with a.i.

Status: Open.

#118 In newbee-ltd/newbee-mall;

· Duvalkidd01 opened on Feb 11, 2026

Logical Vulnerability

Status: Open.

#117 In newbee-ltd/newbee-mall;

· wrndmzmnq opened on Feb 10, 2026

File Upload Vulnerability

Status: Open.

#116 In newbee-ltd/newbee-mall;

· wrndmzmnq opened on Feb 10, 2026

CSRF Vulnerability in Admin Carousel Management

Status: Open.

#115 In newbee-ltd/newbee-mall;

· flashzyc opened on Feb 5, 2026