Vulnerabilities

A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input.

An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data.

A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0.

A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0 and classified as problematic.

A vulnerability has been found in ghostxbh uzy-ssm-mall 1.0.0 and classified as critical.

A vulnerability, which was classified as critical, was found in ghostxbh uzy-ssm-mall 1.0.0.