Mini-Tmall vulnerabilities
We track 3 vulnerabilities in Mini-Tmall products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 3, 2025.
Latest Mini-Tmall vulnerabilities
- 9.8 Critical severity
Mini-Tmall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack
- 9.8 Critical severity
Mini-Tmall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewardMapper.select of the file tmall/admin/order/1/1. The manipulation of the argument orderBy leads to sql injection. It is possible to launch
- 9.8 Critical severity
Mini-Tmall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20230811. Affected by this issue is some unknown functionality of the file product/1/1?test=1&test2=2&. The manipulation of the argument orderBy leads to sql injection. The a