Macrozheng

Mall

16 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2025-8755

Exploit
  • EPSS 0.05%
  • Veröffentlicht 09.08.2025 14:02:05
  • Zuletzt bearbeitet 02.09.2025 19:23:47

A vulnerability was found in macrozheng mall up to 1.0.3 and classified as problematic. This issue affects the function detail of the file UmsMemberController.java of the component com.macro.mall.portal.controller. The manipulation of the argument or...

5.4

CVE-2025-8750

Exploit
  • EPSS 0.03%
  • Veröffentlicht 09.08.2025 07:02:06
  • Zuletzt bearbeitet 02.09.2025 19:23:28

A vulnerability has been found in macrozheng mall up to 1.0.3 and classified as problematic. Affected by this vulnerability is the function Upload of the file /minio/upload of the component Add Product Page. The manipulation of the argument File lead...

6.3

CVE-2025-8742

Exploit
  • EPSS 0.13%
  • Veröffentlicht 08.08.2025 22:16:18
  • Zuletzt bearbeitet 02.09.2025 19:22:56

A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation leads to improper restriction of excessive authentication attemp...

5.9

CVE-2025-8741

Exploit
  • EPSS 0.03%
  • Veröffentlicht 08.08.2025 21:32:05
  • Zuletzt bearbeitet 02.09.2025 19:22:44

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive informat...

5.4

CVE-2025-8191

Exploit
  • EPSS 0.51%
  • Veröffentlicht 26.07.2025 13:32:05
  • Zuletzt bearbeitet 03.09.2025 14:38:16

A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross ...

8.1

CVE-2024-11619

  • EPSS 0.23%
  • Veröffentlicht 22.11.2024 21:15:17
  • Zuletzt bearbeitet 04.09.2025 15:44:51

A vulnerability, which was classified as problematic, has been found in macrozheng mall up to 1.0.3. Affected by this issue is some unknown functionality of the component JWT Token Handler. The manipulation leads to use of default cryptographic key. ...