CVE-2025-1843 Mini-Tmall ProductMapper.java select sql injection

A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploi...

CVE-2025-1843

CVE-2025-1843 affects Mini-Tmall up to 20250211. The issue lies in the file com/xq/tmall/dao/ProductMapper.java, in the select function where manipulating the argument orderBy enables an SQL injection. The vulnerability can be triggered remotely, and the exploit has been disclosed publicly. Multi...

CVE-2025-1843: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploi...

PT-2025-9237

Name of the Vulnerable Software and Affected Versions Mini-Tmall versions up to 20250211 Description A critical issue has been found in Mini-Tmall, affecting the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the orderBy argument leads to SQL injection. The...