Products: 1
Vulnerabilities: 7
Known Exploited: 0
0
Critical Level Threats
0
High Level Threats
6
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-38808
SQL Injection vulnerability in uzy-ssm-mall v1.1.0 allows a remote attacker to obtain sensitive information via the ProductMapper.xml and /OrderUtil.java components
Last Modified: May 30, 2026
Published: May 27, 2026
CVE-2025-60834
A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input.
Last Modified: Oct 10, 2025
Published: Oct 08, 2025
CVE-2025-60833
An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data.
Last Modified: Oct 10, 2025
Published: Oct 08, 2025
CVE-2025-3561
ghostxbh uzy-ssm-mall cross-site request forgery
Last Modified: Oct 10, 2025
Published: Apr 14, 2025
CVE-2025-3560
ghostxbh uzy-ssm-mall product cross site scripting
Last Modified: Oct 10, 2025
Published: Apr 14, 2025
Items Per Page
