78 matches found
CVE-2025-25997
Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...
PT-2025-7123 · Unknown · Feminer Wms
Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: A Directory Traversal issue allows a remote attacker to obtain sensitive information via the databak.php component. This enables the attacker to access confidential data. Recommendations: For FeMiner wms...
FeMiner wms 安全漏洞
FeMiner wms is a warehouse management system for individual developers of Front End Miner FeMiner in China. A security vulnerability exists in FeMiner wms version 1.0, which stems from the inclusion of a SQL injection vulnerability...
PT-2025-7122 · Unknown · Feminer Wms
Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information through the parameters date1, date2, and id. This is due to a SQL injection vulnerability. Recommendations: For FeMiner wms version 1.0,...
PT-2025-7120 · Unknown · Feminer Wms
Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the "inquire inout item.php" component. Recommendations: For FeMiner wms version 1.0, consider restricting access to...
CVE-2025-25993
SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...
CVE-2025-25992
SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...
CVE-2025-25994
SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...
CVE-2025-25997
Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...
FeMiner wms 安全漏洞
FeMiner wms is a repository management system for individual developers of Front End Miner FeMiner in China. A security vulnerability exists in FeMiner wms version 1.0, which stems from the inclusion of a path traversal vulnerability...
CVE-2025-25993
SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...
CVE-2025-25994
SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...
PT-2025-7121 · Unknown · Feminer Wms
Name of the Vulnerable Software and Affected Versions: FeMiner WMS version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the itemid parameter. Recommendations: For FeMiner WMS version 1.0, avoid using the parameter itemid in the affected...
FeMiner wms 安全漏洞
FeMiner wms is a warehouse management system for Chinese front-end miners FeMiner individual developers. A SQL injection vulnerability exists in FeMiner wms version 1.0, which stems from the lack of validation of externally entered SQL statements in iquelinoutitem.php. An attacker can exploit thi...
CVE-2025-25992
CVE-2025-25992 corresponds to a SQL injection in FeMiner wms 1.0. Multiple connected sources (CNVD-2025-03952, RH, NVD, CNNVD) describe the issue as arising from the lack of validation of externally entered SQL statements in the iquel_inout_item.php component, enabling an attacker to obtain sensi...
CVE-2025-25993
The CVE-2025-25993 entry concerns FeMiner WMS 1.0 with a SQL injection in the itemid parameter that can leak sensitive information. Affected software: FeMiner WMS (v1.0). Root cause: improper handling of the itemid input allowing injection. Impact per sources: confidentiality information disclosu...
CVE-2025-25997
CVE-2025-25997 describes a Directory Traversal vulnerability in FeMiner wms v1.0, where a remote attacker can obtain sensitive information via the databak.php component. The CVSS v3.1 base metrics indicate NETWORK attack vector, LOW attack complexity, NO privileges required, NO user interaction, ...
CVE-2021-33949
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function...
