CVE-2024-40560

The Mini-Tmall (also referred to as Tmall_demo ) application, a Spring Boot-based mall template, is vulnerable to SQL injection in versions prior to v2024.07.03 . The root cause is a lack of validation for externally entered SQL statements. An attacker can exploit this flaw to execute illegal SQL...

CVE-2024-40555

Tmalldemo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability...