TI-2025-04605 CVE-2025-5136 · GHSA-vwr5-vc8h-j5xm
Tmall Demo Payment Identifier pay random values
Priority MEDIUM 61
A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505.
Vulnerabilities
13 records
TI-2025-04604 CVE-2025-5135 · GHSA-22xp-w9q9-jfg2
Tmall Demo Product Details Page admin cross site scripting
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505.
TI-2025-04603 CVE-2025-5134 · GHSA-fxq6-r9jg-wqh8
Tmall Demo Buy Item Page cross site scripting
Priority MEDIUM 56
A vulnerability classified as problematic was found in Tmall Demo up to 20250505.
TI-2025-04602 CVE-2025-5133 · GHSA-jm9m-9mxg-ppp4
Tmall Demo Search Box cross site scripting
Priority MEDIUM 63
A vulnerability classified as problematic has been found in Tmall Demo up to 20250505.
TI-2025-04601 CVE-2025-5132 · GHSA-rxx5-2jmm-9729
Tmall Demo logout cross-site request forgery
Priority MEDIUM 63
A vulnerability was found in Tmall Demo up to 20250505.
TI-2025-04600 CVE-2025-5131 · GHSA-73j9-hwpp-f466
Tmall Demo uploadCategoryImage unrestricted upload
Priority MEDIUM 56
A vulnerability was found in Tmall Demo up to 20250505.
TI-2025-04599 CVE-2025-5130 · GHSA-x62f-85rp-96qf
Tmall Demo uploadProductImage unrestricted upload
Priority MEDIUM 56
A vulnerability was found in Tmall Demo up to 20250505.
TI-2025-01588 CVE-2025-1843 · GHSA-fggg-72p3-wj6v
Mini-Tmall ProductMapper.java select sql injection
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211.
TI-2024-07944 CVE-2024-8568 · GHSA-pf52-hh8x-27rf
Mini-Tmall 1 rewardMapper.select sql injection
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901.
TI-2024-27002 CVE-2024-40560 · GHSA-v6g2-fqh9-vg4f
Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
Priority HIGH 65
Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
TI-2024-27001 CVE-2024-40555 · GHSA-cvpr-vgp2-92p4
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
Priority LOW 24
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
TI-2024-27000 CVE-2024-40554 · GHSA-4rm3-98rm-pmgw
An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
Priority HIGH 74
An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
TI-2024-26999 CVE-2024-40553 · GHSA-22q3-4v32-4m7c
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.
Priority MEDIUM 56
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.