CVE-2025-25769

High CVSS: 8.0

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.

Vendor

Product

CWE

Yayın Tarihi

2025-02-21 19:15:14

Güncelleme

2025-03-28 20:08:22

Source Identifier

cve@mitre.org

KEV Date Added

CWE-352 Wangmarket HIGH Wang.market 2025

https://flowus.cn/share/56c86622-1e4d-47ed-923c-9e37aff00079

Medium

CVE-2025-15452

A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/s…

Medium

CVE-2025-15451

A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality o…

Medium

CVE-2025-15416

A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of…

Medium

CVE-2025-15415

A vulnerability has been found in xnx3 wangmarket up to 6.4. The impacted element is the function uploadImage of the fil…

Medium

CVE-2025-25770

Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyU…