TD
Product
Tmall Demo
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 5Low 1
Watch
Add Tmall Demo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1843 | 9.8 | Mar 3 | Mini-Tmall ProductMapper.java select sql injection Affected: through 2025-02-11 |
| CVE-2024-8568 | 9.8 | Sep 8 | Mini-Tmall 1 rewardMapper.select sql injection Affected: before 2024-09-01 |
| CVE-2025-5132 | 8.8 | May 24 | Tmall Demo logout cross-site request forgery Affected: through 2025-05-05 |
| CVE-2024-40554 | 7.5 | Jul 15 | An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information Affected: 2024-07-03 |
| CVE-2024-40560 | 7.3 | Jul 15 | Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability Affected: before 2024-07-03 |
| CVE-2025-5131 | 7.2 | May 24 | Tmall Demo uploadCategoryImage unrestricted upload Affected: through 2025-05-05 |
| CVE-2025-5130 | 7.2 | May 24 | Tmall Demo uploadProductImage unrestricted upload Affected: through 2025-05-05 |
| CVE-2025-5135 | 6.1 | May 24 | Tmall Demo Product Details Page admin cross site scripting Affected: through 2025-05-05 |
| CVE-2025-5134 | 6.1 | May 24 | Tmall Demo Buy Item Page cross site scripting Affected: through 2025-05-05 |
| CVE-2025-5133 | 6.1 | May 24 | Tmall Demo Search Box cross site scripting Affected: through 2025-05-05 |
| CVE-2024-40555 | 5.3 | Jul 15 | Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability Affected: 2024-07-03 |
| CVE-2024-40553 | 4.9 | Jul 15 | Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage Affected: 2024-07-03 |
| CVE-2025-5136 | 3.7 | May 24 | Tmall Demo Payment Identifier pay random values Affected: through 2025-05-05 |
Showing 13