Wangmarket
Approved changes feed: RSS · Atom
cpe:2.3:a:wang.market:wangmarket:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wang.Market (d03df65d-107b-5f31-8c33-025dd070e554) |
|---|---|
| Product | Wangmarket (a7327d49-8bb3-5620-88d5-7f839aa93c81) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/xnx3/wangmarket |
purl2cpe | 2026-06-01 10:15:07.863833 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25770 |
vulnerable | 2026-06-08 07:12:51.340189 |
Details available
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
Published: 2025-02-21T00:00:00.000Z
Updated: 2025-02-24T17:16:38.730Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25769 |
vulnerable | 2026-06-08 07:12:51.339716 |
Details available
Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.
Published: 2025-02-21T00:00:00.000Z
Updated: 2025-02-24T17:18:51.996Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15452 |
vulnerable | 2026-06-08 07:06:36.259680 |
xnx3 wangmarket Backend Variable Search variableList.do variableList cross site scripting
LOW (2.4)
A weakness has been identified in xnx3 wangmarket up to 4.9. This affects the function variableList of the file /admin/system/variableList.do of the component Backend Variable Search. Executing a manipulation of the argument Description can lead to cross site scripting. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-05T02:02:09.544Z
Updated: 2026-02-23T08:15:53.792Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15451 |
vulnerable | 2026-06-08 07:06:36.259303 |
xnx3 wangmarket System Variables variableSave.do cross site scripting
LOW (2.4)
A security flaw has been discovered in xnx3 wangmarket up to 4.9. Affected by this issue is some unknown functionality of the file /admin/system/variableSave.do of the component System Variables Page. Performing a manipulation of the argument Description results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-05T01:32:09.347Z
Updated: 2026-02-23T08:15:32.162Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15416 |
vulnerable | 2026-06-08 07:06:36.217696 |
xnx3 wangmarket Add Global Variable save.do cross site scripting
LOW (2.4)
A vulnerability was found in xnx3 wangmarket up to 6.4. This affects an unknown function of the file /siteVar/save.do of the component Add Global Variable Handler. The manipulation of the argument Remark/Variable Value results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-01T22:32:06.900Z
Updated: 2026-02-23T08:04:37.309Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15415 |
vulnerable | 2026-06-08 07:06:36.217228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.