CNNVD-202512-888 Information
Dec 08, 2025
cve
CNNVD ID
CNNVD-202512-888
Related CVE
- CNNVD Published: 2025-12-08
Description (Chinese)
jshop_mall（Jshop小程序商城）是中国吉海科技（hnjihai）开源的一个电商系统。 jshop_mall 2.9.0版本存在SQL注入漏洞，该漏洞源于对文件/index.php/api.html中参数cat_id的错误操作，可能导致SQL注入攻击。
Description (English)
Jshop mall (Jshop Applet Mall) is an electrical power system that is open to hnjihai, China. The jshop mall 2.9.0 has an injection loophole in SQL, which stems from an error in the parameter cat id in the document/index.php/api.html, which could lead to an attack on SQL.
Hazard Level
High
Vulnerability Type
SQL注入
Affected Vendor
吉海科技
Published
2025-12-08
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.334765 https://vuldb.com/?submit.702613 http://101.200.76.102:38765/qwertyuiop/qwsdfvbnm/1/vuldb/Jshop/Jshop.html https://vuldb.com/?id.334765 https://access.redhat.com/security/cve/cve-2025-14259
Share on: