sanluan vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20241
3. 20252
4. 202615

Newest CVEs

• CVE-2026-121583

  Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization

  Sanluan · PublicCMS

  Medium5.3
• CVE-2026-120319

  Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization

  Sanluan · PublicCMS

  Medium5.3
• CVE-2026-110113

  PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint

  Sanluan · PublicCMS

  Medium5.3
• CVE-2026-97721

  Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization

  Sanluan · PublicCMS

  Medium5.1
• CVE-2026-8740

  Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine

  Sanluan · PublicCMS

  Medium5.3
• CVE-2026-8739

  Sanluan PublicCMS SafeConfigComponent.java getSignKey hard-coded key

  Sanluan · PublicCMS

  Medium6.9
• CVE-2026-8738

  Sanluan PublicCMS Trade Payment Flow TradeOrderController.java AccountGatewayComponent.pay logic error

  Sanluan · PublicCMS

  Medium6.9
• CVE-2026-8737

  Sanluan PublicCMS Trade Address Query TradeAddressListDirective.java execute missing authentication

  Sanluan · PublicCMS

  Medium6.9
• CVE-2026-6797

  Sanluan PublicCMS DocToHtmlUtils.java ZipSecureFile.setMinflateRatio resource consumption

  Sanluan · PublicCMS

  Medium5.3
• CVE-2026-6796

  Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file

  Sanluan · PublicCMS

  Medium5.3