Project Team vulnerabilities
We track 5 vulnerabilities in Project Team products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 24, 2025.
Latest Project Team vulnerabilities
- 8.8 High severity
Demo: Cross-Site Request Forgery
A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/account/logout. The manipulation leads to cross-site request forgery. The attack may be initiated remot
- 7.2 High severity
Demo: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the file tmall/admin/uploadCategoryImage. The manipulation of the argument File leads to unrestricted uploa
- 7.2 High severity
Demo: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function uploadProductImage of the file tmall/admin/uploadProductImage. The manipulation of the argument File leads to unrestricted upload. It is possi
- 9.8 Critical severity
Mini-Tmall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.java. The manipulation of the argument orderBy leads to sql injection. The attack
- 9.8 Critical severity
Mini-Tmall: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewardMapper.select of the file tmall/admin/order/1/1. The manipulation of the argument orderBy leads to sql injection. It is possible to launch