CNNVD-202509-2874 Information
Sep 18, 2025
cve
CNNVD ID
CNNVD-202509-2874
Related CVE
- CNNVD Published: 2025-09-18
Description (Chinese)
Weitong Mall（微同商城）是fuyang_lipengjun个人开发者的一个商场系统。 Weitong Mall 1.0版本存在授权问题漏洞，该漏洞源于文件/attribute/queryAll中AttributeController函数授权不当，可能导致远程攻击。
Description (English)
Weitong Mall (Microbusiness) is a mall system for the personal developer of Fuyang lipengjun. Version 1.0 of Weitong Mall has a mandate gap, which arises from the inappropriate authorization of the AttributeControll function in the document/attribute/queryAll, which could lead to a remote attack.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
个人开发者
Published
2025-09-18
Last Modified
2026-02-24
References
https://vuldb.com/?submit.653343 https://vuldb.com/?ctiid.324796 https://vuldb.com/?id.324796 https://www.cnblogs.com/aibot/p/19063430 https://access.redhat.com/security/cve/cve-2025-10675
Share on: