Tmall Demo

Vendor:

First CVE: Jul 15, 2024 · Active for 2 years

13
Total CVEs
More Total CVEs than 92% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Tmall Demo over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jul 15, 2024
2 years ago
Most Recent CVE
May 25, 2025
429 days ago

CVE Severity & Scoring

Tmall Demo13 CVEs
All CVEs353,173 CVEs
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network13 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low12 (92.3%)
High1 (7.7%)
Unknown0 (0.0%)
User Interaction
None9 (69.2%)
Unknown0 (0.0%)
Required4 (30.8%)
Privileges Required
Low0 (0.0%)
High3 (23.1%)
None10 (76.9%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (13 CVEs).

13 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-8568CRITICAL
A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901. Affected is the function rewardMapper.select of the file tmall/admin/order/1/1. The manip
Sep 8, 20249.829NONO
CVE-2025-1843CRITICAL
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211. This issue affects the function select of the file com/xq/tmall/dao/ProductMapper.ja
Mar 3, 20259.827NONO
CVE-2025-5132HIGH
A vulnerability was found in Tmall Demo up to 20250505. It has been rated as problematic. This issue affects some unknown processing of the file tmall/admin/account/logout. The man
May 24, 20258.824NONO
CVE-2025-5131HIGH
A vulnerability was found in Tmall Demo up to 20250505. It has been declared as critical. This vulnerability affects the function uploadCategoryImage of the file tmall/admin/upload
May 24, 20257.221NONO
CVE-2025-5130HIGH
A vulnerability was found in Tmall Demo up to 20250505. It has been classified as critical. This affects the function uploadProductImage of the file tmall/admin/uploadProductImage.
May 24, 20257.221NONO
CVE-2024-40560HIGH
Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
Jul 15, 20247.321NONO
CVE-2025-5135MEDIUM
A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505. Affected by this issue is some unknown functionality of the file /tmall/admin/ of
May 24, 20256.119NONO
CVE-2025-5134MEDIUM
A vulnerability classified as problematic was found in Tmall Demo up to 20250505. Affected by this vulnerability is an unknown functionality of the component Buy Item Page. The man
May 24, 20256.119NONO
CVE-2025-5133MEDIUM
A vulnerability classified as problematic has been found in Tmall Demo up to 20250505. Affected is an unknown function of the component Search Box. The manipulation leads to cross
May 24, 20256.119NONO
CVE-2024-40554HIGH
An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
Jul 15, 20247.519NONO
View all 13 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (13 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (13 CVEs).

Media Mentions

Signals from CVEs in this product scope (13 CVEs).

Top CNAs Publishing CVEs For Tmall Demo

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2024-07-0335.90.3%00