CVE-2026-18854: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter of the file /Base/BaseService.asmx/DataService. The manipulation of the argument FilterString leads to sql injection. Remote exploitation ...

PT-2026-67896

Name of the Vulnerable Software and Affected Versions Shandong Hoteam PDM Product Data Management System versions prior to 8.3.11 Description Remote exploitation is possible through a SQL injection in the /Base/BaseService.asmx/DataService endpoint. The issue occurs when the FilterString argument...

CVE-2026-7727

Technical details about CVE-2026-7727 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-7727: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /Base/BaseService.asmx/DataService. This manipulation of the argument SortOrder causes sql injection. The attack can be...