56 matches found
CVE-2026-112252
A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...
EUVD-2026-104573
A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...
CVE-2026-112252
A SQL injection vulnerability exists in the Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System (versions up to 3.5). The flaw is located in the xp_cmdshell function of the /ws.asmx file, where manipulation of the sql argument allows for remote executi...
CVE-2026-112252 Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection
A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...
CVE-2026-112252 Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System ws.asmx xp_cmdshell sql injection
A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...
CVE-2026-112247
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...
EUVD-2026-104527
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...
CVE-2026-112247
A weakness exists in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System (up to version 3.5 ) affecting the Upload Endpoint component. Specifically, an unknown function in the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx is vulnerable to Cro...
CVE-2026-112247 Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cross site scripting
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...
CVE-2026-112247 Wuxi Wubang Security Software Five-in-One Safety Production Management Information System Upload Endpoint upload.aspx cross site scripting
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...
PT-2026-117522
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...
Wuxi Wubang Security Software ‘Five-in-One’ Safety Production Management Information System Cross-site Scripting Vulnerability
Versions 3.5 and earlier of the Wuxi Wubang Security Software ‘Five-in-One’ Safety Production Management Information System contain a security vulnerability. This vulnerability stems from improper handling of the NewFile parameter in the file...
PT-2026-117617
Name of the Vulnerable Software and Affected Versions Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System versions prior to 3.6 Description An unauthenticated SQL injection exists in the /ws.asmx endpoint. The issue occurs when the sql argument is...
VulnCheck KEV: CVE-2026-112247
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...
CVE-2026-112252: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xpcmdshell of the file /ws.asmx. The manipulation of the argument sql leads to sql injection. The attack may be initiated remotely...
CVE-2026-112247: Improper Neutralization of Input During Web Page Generation
A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file /FCKeditor/editor/filemanager/connectors/aspx/upload.aspx of the component Upload Endpoint. Executing a manipulation ...
Wuxi Wubang Security Software ‘Five-in-One’ Safety Production Management Information System input validation error vulnerability
Versions 3.5 and earlier of the Wuxi Wubang Security Software ‘Five-in-One’ Safety Production Management Information System contain a security vulnerability. This vulnerability stems from improper handling of the ‘sql’ parameter in the xpcmdshell function within the file /ws.asmx, potentially...
Delmia Apriso Auth Bypass
The vulnerability of the DELMIA Apriso production management system is related to the lack of privileges required to access the application. Exploiting this vulnerability could allow a malicious actor to gain privileged access to the application remotely...
SSM-EERP and Production_SSM authorization issue vulnerabilities
productionssm is an ERP system developed by MegaGao’s individual developers using Spring+SpringMVC+Mybatis and jQuery EasyUI. ssm-erp is a production management ERP system developed by fenghaha’s individual developers. There are authorization issues between ssm-erp and productionssm...
Microsoft Dynamics 365 Information Leakage Vulnerability
Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. It is used for financial management, production management and business intelligence management. An information disclosure vulnerability exists in Microsoft Dynamics 365. An attacker...