CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...

CVE-2024-40560

The Mini-Tmall (also referred to as Tmall_demo ), a Spring Boot-based mini-mall application, contains a SQL injection vulnerability in versions prior to v2024.07.03 . The root cause is the application's lack of validation for externally entered SQL statements. An attacker can exploit this flaw to...