CVE-2026-38808

SQL Injection vulnerability in uzy-ssm-mall v1.1.0 allows a remote attacker to obtain sensitive information via the ProductMapper.xml and /OrderUtil.java components...

uzy-ssm-mall 安全漏洞

uzy-ssm-mall Yuzu Cloud E-commerce Mall is an SSM framework developed by the developer ghostxbh. It is used to create e-commerce stores, bookstore stores, and customer management systems. Version 1.1.0 of uzy-ssm-mall contains security vulnerabilities. These vulnerabilities stem from SQL injectio...

CVE-2026-38808

The uyz-ssm-mall (Yuzu Cloud E-commerce Mall) software, an SSM framework used for creating e-commerce stores and customer management systems, is vulnerable to SQL Injection in version v1.1.0 . The root cause lies within the ProductMapper.xml and /OrderUtil.java components. This vulnerability allo...