CVE-2026-1549

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may ...

CVE-2026-1549 jishenghua jshERP PluginController uploadPluginConfigFile path traversal

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may ...

EUVD-2026-4977

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may ...

CVE-2026-1549

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may ...

CVE-2026-1549 jishenghua jshERP PluginController uploadPluginConfigFile path traversal

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may ...

CVE-2026-1549

CVE-2026-1549 affects jishenghua jshERP up to version 3.6. The vulnerability is a path traversal in PluginController’s uploadPluginConfigFile handling of the configFile argument, with potential remote exploitation. Public exploits exist. External notices (Red Hat, CIRCL, etc.) corroborate the iss...

CVE-2026-1549: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in jishenghua jshERP up to 3.6. Affected by this vulnerability is an unknown functionality of the file /jshERP-boot/plugin/uploadPluginConfigFile of the component PluginController. Such manipulation of the argument configFile leads to path traversal. The attack may ...

PT-2026-5236

Name of the Vulnerable Software and Affected Versions jishenghua jshERP versions prior to 3.7 Description A flaw exists in jishenghua jshERP that allows for path traversal. This issue affects an unknown functionality within the /jshERP-boot/plugin/uploadPluginConfigFile file of the PluginControll...

CVE-2019-19684

CVE-2019-19684 affects nopCommerce v4.2.0, enabling privilege escalation via file upload through Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs (Admin/FacebookAuthentication/Configure) by uploading a crafted Facebook Auth plugin. Root cause: insecure file upload in the PluginCon...