EUVD-2026-66814

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...

CVE-2026-75336

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...

CVE-2026-75336

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...

CVE-2026-75336

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...

CVE-2026-75336

The Funiture software, version 1.0.0 , is vulnerable to SQL Injection due to improper neutralization of special elements used in SQL commands. This vulnerability exists in the backend tool interfaces, specifically affecting the /sys/tool/select.json and /sys/tool/update.json endpoints. The impact...

CVE-2026-75336: Improper Neutralization of Special Elements used in an SQL Command

Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...

PT-2026-82337

Name of the Vulnerable Software and Affected Versions Funiture version 1.0.0 Description SQL Injection occurs in the backend tool interfaces. This issue affects the endpoints '/sys/tool/select.json' and '/sys/tool/update.json'. Recommendations At the moment, there is no information about a newer...

EUVD-2025-15606

Malicious code in bioql PyPI...

CVE-2025-4838

A vulnerability, which was classified as problematic, was found in kanwangzjm Funiture up to 71ca0fb0658b3d839d9e049ac36429207f05329b. Affected is the function doPost of the file /funiture-master/src/main/java/com/app/mvc/acl/servlet/LoginServlet.java of the component Login. The manipulation of t...

CVE-2025-4838

A vulnerability, which was classified as problematic, was found in kanwangzjm Funiture up to 71ca0fb0658b3d839d9e049ac36429207f05329b. Affected is the function doPost of the file /funiture-master/src/main/java/com/app/mvc/acl/servlet/LoginServlet.java of the component Login. The manipulation of t...

CVE-2025-4838

Vulnerability overview (CVE-2025-4838): Affected product: kanwangzjm Funiture (up to commit 71ca0fb0658b3d839d9e049ac36429207f05329b). The issue is in the Login component, specifically the LoginServlet.java file and its doPost function. The argument ret can be manipulated to induce an open redire...

CVE-2025-4838 kanwangzjm Funiture Login LoginServlet.java doPost redirect

A vulnerability, which was classified as problematic, was found in kanwangzjm Funiture up to 71ca0fb0658b3d839d9e049ac36429207f05329b. Affected is the function doPost of the file /funiture-master/src/main/java/com/app/mvc/acl/servlet/LoginServlet.java of the component Login. The manipulation of t...

CVE-2025-4838: URL Redirection to Untrusted Site

A vulnerability, which was classified as problematic, was found in kanwangzjm Funiture up to 71ca0fb0658b3d839d9e049ac36429207f05329b. Affected is the function doPost of the file /funiture-master/src/main/java/com/app/mvc/acl/servlet/LoginServlet.java of the component Login. The manipulation of t...

Funiture 输入验证错误漏洞

Funiture is a spring project by Zheng Jimin personal developer. It contains features such as rights management, system monitoring, dynamic adjustment of timed tasks, qps limitation, sql monitoring email, captcha service, short link service, dynamic configuration, etc. The vulnerability exists in...