Design/Logic Flaw

Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...