macrozheng mall login cleartext transmission_CVE-2025-8741

6.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Basic Information

ID CVE-2025-8741

Source VulDB

Published Aug 8, 2025 at 21:32

Affected Product

Vendor macrozheng

Product mall

Version 1.0.0

Affected Versions macrozheng mall 1.0.0
macrozheng mall 1.0.1
macrozheng mall 1.0.2
macrozheng mall 1.0.3

CWE Classification

CWE-319 CWE-310

References

{
    "lastseen": "",
    "description": "A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2025-08-08T21:32:05.880Z",
    "modified": "2025-08-08T21:32:05.880Z",
    "type": "cve",
    "title": "macrozheng mall login cleartext transmission",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.319237\nhttps://vuldb.com/?ctiid.319237\nhttps://vuldb.com/?submit.623318\nhttps://github.com/N1n3b9S/cve/issues/10\nhttps://github.com/N1n3b9S/cve/issues/10#issue-3262475757",
    "id": "CVE-2025-8741",
    "bulletinFamily": "",
    "cwe": [
        "CWE-319",
        "CWE-310"
    ],
    "cvelist": null,
    "sourceData": "macrozheng mall 1.0.0\nmacrozheng mall 1.0.1\nmacrozheng mall 1.0.2\nmacrozheng mall 1.0.3",
    "sourceHref": "",
    "cvss": {
        "score": 6.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "mall",
    "version": "1.0.0",
    "vendor": "macrozheng",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}