SQL Injection Flaw in uzy-ssm-mall Product by Unknown Vendor
CVE-2026-38808

Currently unrated

Key Information:

Vendor: Unknown Vendor
Status: uzy-ssm-mall
Vendor: CVE Published:; 27 May 2026

🔔 Create Unknown Vendor Vulnerability Alert

What is CVE-2026-38808?

The SQL Injection vulnerability in the uzy-ssm-mall product version 1.1.0 enables remote attackers to execute arbitrary SQL commands. These commands can be leveraged to retrieve sensitive information from the system, compromising data integrity and user confidentiality. The attack can be executed through the ProductMapper.xml and /OrderUtil.java components, highlighting the necessity for immediate remediation to safeguard affected systems.

References

https://github.com/cagexunxi/CVE/issues/3

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 27, 2026
Vulnerability Reserved
Apr 6, 2026

CVE-2026-38808 Data

JSON