Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2025/03/02 9:15 a.m.•26 views

CVE-2025-1812

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS6.3AI score0.0062EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/02 9:00 a.m.•82 views

CVE-2025-1812

CVE-2025-1812 affects the GetUserOrg function in SuperZ.java (path: com/futvan/z/framework/core/SuperZ.java). The issue is SQL injection caused by manipulation of the userId argument, enabling remote exploitation. Several sources confirm remote exploitability and public disclosure; vendor respons...

8.8CVSS6.3AI score0.0062EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2025/03/02 9:00 a.m.•11 views

CVE-2025-1812

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS6.3AI score0.0062EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/03/02 9:00 a.m.•51 views

CVE-2025-1812 zj1983 zz SuperZ.java GetUserOrg sql injection

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.0062EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/02 12:00 a.m.•8 views

CVE-2025-1812: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS6.3AI score0.0062EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/02 12:00 a.m.•9 views

PT-2025-9207

Name of the Vulnerable Software and Affected Versions zj1983 zz versions up to 2024-08 Description A critical vulnerability has been found in the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to SQL injection. It is possible...

8.8CVSS6AI score0.0062EPSS
SaveExploits1References11
Rows per page
Query Builder