yshopmall <=v1.9.0 is vulnerable to SQL Injection in the image listing interface.
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://gist.github.com/Catherines77/79e6b69490b085d9c2d96c99e72c3579 | Third Party Advisory |
https://github.com/guchengwuyue/yshopmall/issues/34 | Exploit Issue Tracking Vendor Advisory |
https://github.com/guchengwuyue/yshopmall/issues/34 | Exploit Issue Tracking Vendor Advisory |
Configurations
History
12 Jun 2025, 20:34
Type | Values Removed | Values Added |
---|---|---|
First Time |
Guchengwuyue yshopmall
Guchengwuyue |
|
CPE | cpe:2.3:a:guchengwuyue:yshopmall:*:*:*:*:*:*:*:* | |
References | () https://github.com/guchengwuyue/yshopmall/issues/34 - Exploit, Issue Tracking, Vendor Advisory | |
References | () https://gist.github.com/Catherines77/79e6b69490b085d9c2d96c99e72c3579 - Third Party Advisory |
04 Mar 2025, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-03-04 22:15
Updated : 2025-06-12 20:34
NVD link : CVE-2025-25426
Mitre link : CVE-2025-25426
JSON object : View
Products Affected
guchengwuyue
- yshopmall
CWE
No CWE.