CNNVD-202509-3221 Information

CNNVD ID

CNNVD-202509-3221

CVE-2025-10820

  • CNNVD Published: 2025-09-22

Description (Chinese)

Weitong Mall(微同商城)是fuyang_lipengjun个人开发者的一个商场系统。 Weitong Mall 1.0版本存在授权问题漏洞,该漏洞源于文件/topic/queryAll中TopicController函数授权不当,可能导致远程攻击。

Description (English)

Weitong Mall (Microbusiness) is a mall system for the personal developer of Fuyang lipengjun. Version 1.0 of Weitong Mall has a mandate gap, which stems from the inappropriate authorization of the TopicControll function in document/topic/queryAll, which may lead to a long-range attack.

Hazard Level

High

Vulnerability Type

授权问题

Affected Vendor

个人开发者

Published

2025-09-22

Last Modified

2026-02-24

References

https://www.cnblogs.com/aibot/p/19063465 https://vuldb.com/?id.325177 https://vuldb.com/?submit.653741 https://vuldb.com/?ctiid.325177 https://access.redhat.com/security/cve/cve-2025-10820

Share on: