Skip to content
OpenAdvisories

Vendor

Tmall

7 known vulnerabilities.

Products

4 results · Clear filters · Feed

  • Medium 4.3

    Tmall Demo Search Box cross site scripting

    A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function of the component Search Box. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has b…

  • Medium 4.3

    Tmall Demo logout cross-site request forgery

    A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/account/logout. The manipulation leads to cross-site request forgery. The attack may be initiated remo…

  • Medium 4.7

    Tmall Demo uploadCategoryImage unrestricted upload

    A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the file tmall/admin/uploadCategoryImage. The manipulation of the argument File leads to unrestricted uplo…

  • Medium 4.7

    Tmall Demo uploadProductImage unrestricted upload

    A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function uploadProductImage of the file tmall/admin/uploadProductImage. The manipulation of the argument File leads to unrestricted upload. It is poss…