CNNVD-202508-824 Information
CNNVD ID
CNNVD-202508-824
Related CVE
- CNNVD Published: 2025-08-09
Description (Chinese)
mall是macro个人开发者的一套电商系统，包括前台商城系统及后台管理系统。 mall 1.0.3及之前版本存在代码注入漏洞，该漏洞源于文件/minio/upload中参数File处理不当，可能导致跨站脚本攻击。
Description (English)
Mall is a set of electrician systems for Macro’s personal developers, including the front and back office management systems. Mall 1.0.3 and previous versions contain code-injection holes, which stem from the inappropriate handling of File, the parameter in the document/minio/upload, which could lead to a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
个人开发者
Published
2025-08-09
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.319243 https://github.com/N1n3b9S/cve/issues/13 https://vuldb.com/?submit.623655 https://vuldb.com/?id.319243 https://github.com/N1n3b9S/cve/issues/13#issue-3266856872 https://access.redhat.com/security/cve/cve-2025-8750 https://nvd.nist.gov/vuln/detail/CVE-2025-8750
Share on: