Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 14/04/2025 Updated: 15/04/2025

Unrestricted File Upload Vulnerability in Ghostxbh Uzy-SSM-Mall 1.0.0

A critical vulnerability exists in ghostxbh uzy-ssm-mall version 1.0.0. The vulnerability is located in the /mall/user/uploadUserHeadImage file and involves an unrestricted file upload issue through manipulation of the File argument. An attacker can initiate this vulnerability remotely. The exploit details have been publicly disclosed, and the potential for active exploitation exists. Despite early notification, the vendor did not provide a response to address the security issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ghostxbh uzy-ssm-mall

CWE-284 CWE-434 https://nvd.nist.gov https://www.first.org/epss https://vuldb.com/?ctiid.304599 https://vuldb.com/?id.304599 https://vuldb.com/?submit.549259 https://wiki.shikangsi.com/post/share/2f5fafb5-63d3-4784-8866-5592547a71a4

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-3558

Vulnerability Summary

References

Vulmon Search

About

Products

Connect