VendorsWang.marketwangmarketall versions
Vulnerabilities

Wang.market Wangmarket

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2023-26813
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do.
Published 2023-04-28 · Analyzed
9.8EPSS 0.010
CVE-2023-6886
xnx3 wangmarket Role Management Page code injection
Published 2023-12-17 · Modified
9.8EPSS 0.009
CVE-2025-25769
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.
Published 2025-02-21 · Analyzed
8.0EPSS 0.002
CVE-2025-25770
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
Published 2025-02-21 · Analyzed
6.8EPSS 0.002
CVE-2025-15415
xnx3 wangmarket XML File uploadImage.do uploadImage unrestricted upload
Published 2026-01-01 · Analyzed
5.8EPSS 0.002
CVE-2025-15416
xnx3 wangmarket Add Global Variable save.do cross site scripting
Published 2026-01-01 · Analyzed
5.4EPSS 0.003
CVE-2025-15451
xnx3 wangmarket System Variables variableSave.do cross site scripting
Published 2026-01-05 · Analyzed
4.8EPSS 0.003
CVE-2025-15452
xnx3 wangmarket Backend Variable Search variableList.do variableList cross site scripting
Published 2026-01-05 · Analyzed
4.8EPSS 0.003