Mini vulnerabilities
We track 1 vulnerability in Mini products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 8, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Mini vulnerabilities
- 9.8 Critical severity
Mini-Tmall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewardMapper.select of the file tmall/admin/order/1/1. The manipulation of the argument orderBy leads to sql injection. It is possible to launch