VendorsProject Teamtmall_demoall versions
Vulnerabilities

Project Team Tmall Demo

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

13CVEs
CVE-2025-1843
Mini-Tmall ProductMapper.java select sql injection
Published 2025-03-03 · Analyzed
9.8EPSS 0.006
CVE-2024-8568
Mini-Tmall 1 rewardMapper.select sql injection
Published 2024-09-08 · Analyzed
9.8EPSS 0.005
CVE-2025-5132
Tmall Demo logout cross-site request forgery
Published 2025-05-24 · Analyzed
8.8EPSS 0.003
CVE-2024-40554
An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
Published 2024-07-15 · Analyzed
7.5EPSS 0.004
CVE-2024-40560
Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
Published 2024-07-15 · Analyzed
7.3EPSS 0.003
CVE-2025-5131
Tmall Demo uploadCategoryImage unrestricted upload
Published 2025-05-24 · Analyzed
7.2EPSS 0.005
CVE-2025-5130
Tmall Demo uploadProductImage unrestricted upload
Published 2025-05-24 · Analyzed
7.2EPSS 0.005
CVE-2025-5136
Tmall Demo Payment Identifier pay random values
Published 2025-05-24 · Analyzed
6.3EPSS 0.006
CVE-2025-5133
Tmall Demo Search Box cross site scripting
Published 2025-05-24 · Analyzed
6.1EPSS 0.004
CVE-2025-5135
Tmall Demo Product Details Page admin cross site scripting
Published 2025-05-24 · Analyzed
6.1EPSS 0.003
CVE-2025-5134
Tmall Demo Buy Item Page cross site scripting
Published 2025-05-24 · Analyzed
6.1EPSS 0.003
CVE-2024-40555
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
Published 2024-07-15 · Analyzed
5.3EPSS 0.003
CVE-2024-40553
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.
Published 2024-07-15 · Analyzed
4.9EPSS 0.003