CVE-2025-50722

The open-source mall system sparkshop version 1.1.7 is impacted by an Insecure Permissions vulnerability in the Common.php component. This flaw allows a remote attacker to perform arbitrary code execution . While the technical details specify improper neutralization of special elements used in a ...

CVE-2024-40425

File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...