CVE-2026-86261

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

EUVD-2026-72242

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/ustransac.php. Such manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2026-86265

itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/us_transac.php , triggered by manipulation of the Username argument. The attack can be launched remotely and requires low privileges (authentication), with no user interaction needed. Per the CVS...

EUVD-2026-72240

A vulnerability was detected in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impacts the function orderRecordsService.cancelOrder of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Cancellation. The manipulation of the argument ...

CVE-2026-86241

A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the component Cookie Validation. This manipulation of the argument cookieValidationKey causes use of hard-coded cryptographic key . The...

CVE-2026-86244

A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401beta. Affected is the function register/login of the file application/index/controller/User.php of the component User Controller. Such manipulation of the argument url leads to cross site scripting. The attack may be...

CVE-2026-86261 sfturing hosp_order Order Controller OrderController.java authorization

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

CVE-2026-86261 sfturing hosp_order Order Controller OrderController.java authorization

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

EUVD-2026-72237

A weakness has been identified in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impacted element is an unknown function of the file ssmpro/src/main/java/cn/sfturing/web/OrderController.java of the component Order Controller. Executing a manipulation of the argument...

CVE-2026-86260

CVE-2026-86260 affects the Password Recovery component of sfturing hosp_order (a Java/SSM-based hospital order management system). The flaw resides in the modifyPassWord function within ssm_pro/src/main/java/cn/sfturing/web/CommonUserController.java, where a password can be changed without proper...

EUVD-2026-72192

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/suptransac.php. Performing a manipulation of the argument companyname results in sql injection. It is possible to initiate the attack remotely...

CVE-2026-86241

liufee FeehiCMS (up to 2.1.1 ) is affected by a hard-coded cryptographic key vulnerability in the Cookie Validation component, specifically in the file environments/prod/backend/config/main-local.php. Manipulation of the cookieValidationKey argument leads to use of a fixed key, allowing remote at...

CVE-2026-86241 liufee FeehiCMS Cookie Validation main-local.php hard-coded key

A weakness has been identified in liufee FeehiCMS up to 2.1.1. This impacts an unknown function of the file environments/prod/backend/config/main-local.php of the component Cookie Validation. This manipulation of the argument cookieValidationKey causes use of hard-coded cryptographic key . The...

CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload

A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...

EUVD-2026-72180

A weakness has been identified in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/supdel.php?type=supplier. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. Th...

EUVD-2026-72182

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

CVE-2026-86234

A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/custtransac.php?action=add. The manipulation of the argument firstname results in sql injection. It is possible to launch the attack remotely. The exploit is now public and...

PT-2026-86614

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A SQL injection flaw exists in the /pages/sup transac.php endpoint. This issue occurs when the companyname argument is manipulated, allowing a remote attacker to execute arbitrary...

PT-2026-86593

Name of the Vulnerable Software and Affected Versions liufee FeehiCMS versions prior to 2.1.2 Description An issue exists in the Cookie Validation component within the file environments/prod/backend/config/main-local.php. The manipulation of the cookieValidationKey argument leads to the use of a...