Search results

网关是否进行token的校验还是下沉到各个资源服务器区了？网关是否引入了资源服务器》

Status: Open.

#128 In youlaitech/youlai-mall;

· sunyjgithub opened on Feb 9, 2026

CVE-2025-65542 : SQL Injection Vulnerability Report

Status: Open.

#127 In youlaitech/youlai-mall;

· YLChen-007 opened on Nov 14, 2025

SysRoleController.java:updateRoleStatus未鉴权，可能导致普通用户也能随意调整角色启用/禁用状态

Status: Open.

#125 In youlaitech/youlai-mall;

· old6ma opened on May 14, 2025

SysUserController.java:importUsers未鉴权，可能导致普通用户向数据库导入用户数据

Status: Open.

#124 In youlaitech/youlai-mall;

· old6ma opened on May 14, 2025

SysMenuController.java:updateMenuVisible缺少权限检查

Status: Open.

#123 In youlaitech/youlai-mall;

· old6ma opened on Apr 27, 2025

UmsMemberController.java:getMemberPage可能存在权限漏洞

Status: Open.

#122 In youlaitech/youlai-mall;

· old6ma opened on Apr 27, 2025

SysRoleController.java:getRoleForm函数未进行权限检查，可能导致非根用户直接访问根角色

Status: Open.

#121 In youlaitech/youlai-mall;

· old6ma opened on Apr 16, 2025

SysUserController.java:getUserForm函数未进行权限检查，可能导致通过输入用户id直接访问其他用户信息

Status: Open.

#120 In youlaitech/youlai-mall;

· old6ma opened on Apr 16, 2025

[sercurity vulnerability] sql inject

Status: Open.

#118 In youlaitech/youlai-mall;

· GatekeeperBuster opened on Apr 29, 2024

asd

Status: Open.

#114 In youlaitech/youlai-mall;

· GatekeeperBuster opened on Dec 14, 2023

asd

Status: Open.

#113 In youlaitech/youlai-mall;

· GatekeeperBuster opened on Dec 14, 2023

asd

Status: Open.

#112 In youlaitech/youlai-mall;

· GatekeeperBuster opened on Dec 14, 2023