Repository Issue Activity (beta)

#126 [Sercuity]新蜂商城（newbee-mall）后台文件上传无后缀白名单，结合图片/HTML多型文件绕过BufferedImage校验，导致存储型XSS。

#125 [Security]新蜂商城（newbee-mall）POST /admin/profile/name 缺乏 CSRF 防护，可跨站强制重命名管理员登录用户名，导致管理员被永久锁定

#124 [Security]新蜂商城（newbee-mall） GET /admin/logout 接口缺少 CSRF 防护，可被诱导触发强制登出。

#120 [Security] Unauthenticated Order Payment Status Manipulation via /paySuccess

#122 [Security] Stored XSS in Rich Text Content on the Traditional Product Detail Page

#121 [Security] Stored XSS in Product Detail Rich Text Content

#117 Logical Vulnerability

#119 Default admin credentials + weak MD5 password hashing enable full admin compromise and credential cracking

#118 Experimenting with a.i.

#116 File Upload Vulnerability

#115 CSRF Vulnerability in Admin Carousel Management

#114 CSRF Vulnerability in Personal Information Update

#113 CSRF Vulnerability in Payment Processing

#112 CSRF Vulnerability in Shopping Cart Item Deletion

#111 CSRF Vulnerability in Shopping Cart Item Update

#110 CSRF Vulnerability in Shopping Cart Item Addition

#109 CSRF Vulnerability in Order Completion

#108 CSRF Vulnerability in Order Cancellation

#107 CSRF Vulnerability in Order Creation (Critical Design Flaw)

#106 CSRF Vulnerability in Admin Profile Name Update

#76 用户信息更新存在横向越权

#99 PDF XSS Vulnerability in /upload/files of newbee-mall

#101 Guessable CAPTCHA in /common/mall/kaptcha of newbee-mall (CWE-804)

#103 index.html services.html contact.html login.html signup.html dashboard.html style.css app.js

#100 Critical Payment Vulnerability (IDOR) in /paySuccess of newbee-mall