Mall vulnerabilities

3 known vulnerabilities in Mall from Weitong. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Mall: Authorization Bypass Through User-Controlled Key

  CVE-2025-4119Apr 30, 2025Weitong

  A vulnerability classified as critical was found in Weitong Mall 1.0.0. This vulnerability affects unknown code of the file /queryTotal of the component Product Statistics Handler. The manipulation of the argument isDelete with the input 1 leads to improper ac

• 9.1 Critical severity

  Mall: Incorrect Privilege Assignment

  CVE-2025-4118Apr 30, 2025Weitong

  A vulnerability classified as critical has been found in Weitong Mall 1.0.0. This affects an unknown part of the file /historyList of the component Product History Handler. The manipulation of the argument isDelete with the input 1 leads to improper access con

• 9.8 Critical severity

  Mall: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-4961Jan 12, 2024Weitong

  A vulnerability was found in Weitong Mall 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file platform-shop\src\main\resources\com\platform\dao\OrderDao.xml. The manipulation of the argument sidx/orde