126 matches found
Mini-Tmall 安全漏洞
Mini-Tmall is a Spring Boot-based mini-Tmall mall , fast deployment run , suitable for use as a bijou template . SQL injection vulnerability exists in versions prior to Mini-Tmall v2024.07.03. The vulnerability stems from the application's lack of validation of externally entered SQL statements,...
PT-2024-28920 · Unknown · Tmall Demo
Name of the Vulnerable Software and Affected Versions: Tmall demo version 2024.07.03 Description: The issue allows for an arbitrary file upload, which could potentially lead to unauthorized access or malicious activity. Recommendations: For version 2024.07.03, at the moment, there is no informati...
CVE-2024-2074
A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown processing of the file ?r=tmall/admin/user/1/1. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...
Sql injection
A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown processing of the file ?r=tmall/admin/user/1/1. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2024-2074 Mini-Tmall 1 sql injection
A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown processing of the file ?r=tmall/admin/user/1/1. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2024-2074 Mini-Tmall 1 sql injection
A vulnerability was found in Mini-Tmall up to 20231017 and classified as critical. This issue affects some unknown processing of the file ?r=tmall/admin/user/1/1. The manipulation of the argument orderBy leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2024-2074
CVE-2024-2074 affects Mini-Tmall (versions up to 20231017). The vulnerability is a SQL injection caused by manipulation of the orderBy parameter in the endpoint implemented as “?r=tmall/admin/user/1/1”. Evidence across Red Hat, NVD, CVE lists, and security feeds describes remote exploitation and ...
Mini-Tmall SQL Injection Vulnerability
Mini-Tmall is a Spring Boot-based mini-Tmall mall, fast deployment runtime, suitable for use as a Bijou template. A SQL injection vulnerability exists in Mini-Tmall 20231017 and earlier versions, which stems from the parameter orderBy in the file ?r=tmall/admin/user/1/1 that can lead to SQL...
PT-2024-18699 · Unknown · Mini-Tmall
Name of the Vulnerable Software and Affected Versions: Mini-Tmall versions up to 20231017 Description: A critical issue affects the processing of the file at the endpoint "?r=tmall/admin/user/1/1". The manipulation of the orderBy argument leads to SQL injection. The attack can be initiated...
CVE-2023-4445
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The...
CVE-2023-4445
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The...
Sql injection
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The...
CVE-2023-4445 Mini-Tmall sql injection
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The attack may be launched remotely. The...
CVE-2023-4445
CVE-2023-4445 impacts Mini-Tmall up to 20230811. A vulnerability in the function/file path product/1/1?test=1&test2=2& allows SQL injection via manipulation of the orderBy argument. The issue can be exploited remotely; exploitation details are disclosed publicly. A patch/version that fixes this i...
Mini-Tmall SQL注入漏洞
Mini-Tmall is a Spring Boot-based mini-Tmall mall, fast deployment runtime, suitable for use as a Bijou template. Mini-Tmall suffers from a SQL injection vulnerability, which stems from the fact that incorrect manipulation of the parameter orderBy can lead to sql injection...
PT-2023-29243 · Unknown · Mini-Tmall
Name of the Vulnerable Software and Affected Versions: Mini-Tmall versions up to 20230811 Description: A critical issue has been found, affecting some unknown functionality of the file product/1/1?test=1&test2=2&, allowing for SQL injection through the manipulation of the orderBy argument. This...
CVE-2022-30929
Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...
CVE-2022-30929
Mini-Tmall v1.0 is vulnerable to Insecure Permissions via tomcat-embed-jasper...