CVE-2025-5131

A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the file tmall/admin/uploadCategoryImage. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated...

PT-2025-22846 · Unknown · Tmall Demo

Name of the Vulnerable Software and Affected Versions: Tmall Demo up to 20250505 Description: A critical vulnerability was found in Tmall Demo, affecting the uploadCategoryImage function of the file tmall/admin/uploadCategoryImage. The manipulation of the File argument leads to unrestricted uploa...