Lucene search
+L

4 matches found

OSV
OSV
•added 2025/03/02 9:15 a.m.•17 views

CVE-2025-1812

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.6AI score0.0062EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/02 9:00 a.m.•74 views

CVE-2025-1812

CVE-2025-1812 affects the GetUserOrg function in SuperZ.java (path: com/futvan/z/framework/core/SuperZ.java). The issue is SQL injection caused by manipulation of the userId argument, enabling remote exploitation. Several sources confirm remote exploitability and public disclosure; vendor respons...

8.8CVSS6.8AI score0.0062EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/03/02 9:00 a.m.•46 views

CVE-2025-1812 zj1983 zz SuperZ.java GetUserOrg sql injection

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.0062EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/02 12:00 a.m.•3 views

CVE-2025-1812: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS6.3AI score0.0062EPSS
SaveExploits1References1
Rows per page
Query Builder