Tmall_demo 代码问题漏洞

Tmalldemo is a Spring Boot-based mini Tmall by the Xianqi Mall projectteam team. A code issue vulnerability exists in Tmalldemo 20250505 and earlier versions, which stems from the incorrect operation of the parameter File in the file tmall/admin/uploadCategoryImage, resulting in unlimited uploads...

Tmall_demo 安全漏洞

Tmalldemo is a Spring Boot-based mini Tmall by the Xianqi Mall projectteam team. A security vulnerability exists in Tmalldemo 20250505 and earlier versions, which stems from a cross-site request forgery due to misuse of the file tmall/admin/account/logout...

Tmall_demo 代码问题漏洞

Tmalldemo is a Spring Boot-based mini Tmall by the Xianqi Mall projectteam team. A code issue vulnerability exists in Tmalldemo 20250505 and earlier versions, which stems from the incorrect operation of the parameter File in the file tmall/admin/uploadProductImage, resulting in unlimited uploads...

CVE-2024-40560

Tmalldemo before v2024.07.03 was discovered to contain a SQL injection vulnerability...

CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...

CVE-2024-40553

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage...

CVE-2024-40554

An access control issue in Tmalldemo v2024.07.03 allows attackers to obtain sensitive information...

CVE-2024-40553

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage...

CVE-2024-40554

An access control issue in Tmalldemo v2024.07.03 allows attackers to obtain sensitive information...

CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...

CVE-2024-40560

Tmalldemo before v2024.07.03 was discovered to contain a SQL injection vulnerability...

CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...

CVE-2024-40553

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage...

CVE-2024-40560

Tmalldemo before v2024.07.03 was discovered to contain a SQL injection vulnerability...

CVE-2024-40560

Tmalldemo before v2024.07.03 was discovered to contain a SQL injection vulnerability...

CVE-2024-40560

Tmalldemo before v2024.07.03 was discovered to contain a SQL injection vulnerability...

CVE-2024-40554

An access control issue in Tmalldemo v2024.07.03 allows attackers to obtain sensitive information...

CVE-2024-40554

The Tmall_demo software (specifically version v2024.07.03 ) contains an access control issue that allows an attacker to obtain sensitive information . This vulnerability is associated with CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). The impact is characterized as a high ...

CVE-2024-40554: Exposure of Sensitive Information to an Unauthorized Actor

An access control issue in Tmalldemo v2024.07.03 allows attackers to obtain sensitive information...

CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...