GCVE - cpe:2.3:a:ghostxbh:uzy-ssm-mall:1.1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ghostxbh:uzy-ssm-mall:1.1.0:*:*:*:*:*:*:*

part: a version: 1.1.0 update: *

Vendor	Ghostxbh (`2b366c49-b6dd-58ab-b387-6b96da73154a`)
Product	Uzy Ssm Mall (`cc65c2f0-e10b-5f2c-ba3c-47d80a74f3e3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/ghostxbh/uzy-ssm-mall`	purl2cpe	2026-11-03 09:58:33.896370

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-60834`	vulnerable	2026-06-08 07:37:27.380228	Details available A fastjson deserialization vulnerability in uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying a crafted input. Published: 2025-10-08T00:00:00.000Z Updated: 2025-10-08T15:53:08.800Z Open on db.gcve.eu Reference links https://github.com/ChangeYourWay/post/blob/main/uzy-ssm-mall2.md https://gist.github.com/ChangeYourWay/5f2b0100b167edf868dd702c0fa3cc35	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-60833`	vulnerable	2026-06-08 07:37:27.379637	Details available An XML External Entity (XXE) vulnerability in the /mall/wxpay/pay component of uzy-ssm-mall v1.1.0 allows attackers to execute arbitrary code via supplying crafted XML data. Published: 2025-10-08T00:00:00.000Z Updated: 2025-10-08T15:47:22.402Z Open on db.gcve.eu Reference links https://github.com/ChangeYourWay/post/blob/main/uzy-ssm-mall.md https://gist.github.com/ChangeYourWay/1364b9e78490ebd5cd31bcdc105a914f	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.