2 matches found
CVE-2026-2864
A vulnerability has been found in fenghaha/megagao ssm-erp and productionssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. This affects the function pictureDelete of the file PictureController.java. Such manipulation of the argument picName leads to path traversal. The attack can be launched...
5.5CVSS0.00459EPSS
SaveExploits0References5
CVE-2026-2864: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in fenghaha/megagao ssm-erp and productionssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. This affects the function pictureDelete of the file PictureController.java. Such manipulation of the argument picName leads to path traversal. The attack can be launched...
5.5CVSS5.4AI score0.00459EPSS
SaveExploits0References1
20