PT-2025-41266 · Unknown · Uzy-Ssm-Mall

Changeyourway · Publicado 2025-10-08 · Atualizado 2025-10-08 · CVE-2025-60833

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions uzy-ssm-mall version 1.1.0

Description The /mall/wxpay/pay component contains a flaw that allows attackers to execute arbitrary code by providing specially crafted XML data. This is due to an XML External Entity (XXE) issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-91

Identificadores relacionados

CVE-2025-60833

Produtos afetados

Uzy-Ssm-Mall

Referências · 6

• 🔥 https://github.com/ChangeYourWay/post/blob/main/uzy-ssm-mall.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60833 · Nota de Segurança
• https://t.me/CVEtracker/34449 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-60833 · Aviso do Fabricante
• https://gist.github.com/ChangeYourWay/1364b9e78490ebd5cd31bcdc105a914f · Nota
• https://twitter.com/CVEnew/status/1975977620463313010 · Publicação no Twitter