CNNVD-202509-3218 Information
Sep 22, 2025
cve
CNNVD ID
CNNVD-202509-3218
Related CVE
- CNNVD Published: 2025-09-22
Description (Chinese)
Weitong Mall（微同商城）是fuyang_lipengjun个人开发者的一个商场系统。 Weitong Mall（微同商城）1.0版本存在授权问题漏洞，该漏洞源于文件/usercoupon/queryAll中函数UserCouponController授权不当，可能导致远程攻击。
Description (English)
Weitong Mall (Microbusiness) is a mall system for the personal developer of Fuyang lipengjun. Version 1.0 of the Weitong Mall (microbusiness) has a mandate gap, which stems from the inappropriate authorization of the UserCouponControll function in document/usercoupon/queryAll, which could lead to a long-range attack.
Hazard Level
High
Vulnerability Type
授权问题
Affected Vendor
个人开发者
Published
2025-09-22
Last Modified
2026-02-24
References
https://vuldb.com/?id.325176 https://www.cnblogs.com/aibot/p/19063466 https://vuldb.com/?ctiid.325176 https://vuldb.com/?submit.653740 https://access.redhat.com/security/cve/cve-2025-10819
Share on: