CVE-2026-9544: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by this vulnerability is an unknown functionality of the file /api/Dinner/PayConfig. Performing a manipulation of the argument tableno results in sql injection. The attack is possible...

CVE-2025-14697

A security flaw has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this issue is some unknown functionality of the file /ExportFiles/. The manipulation results in files or directories accessible. The attack may be launched remotel...

CVE-2025-14696

A vulnerability was identified in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this vulnerability is an unknown functionality of the file /api/GylOperator/UpdatePasswordBatch. The manipulation leads to weak password recovery. The attack may be...

CVE-2025-14696

CVE-2025-14696 affects Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. The vulnerability targets an unspecified functionality in /api/GylOperator/UpdatePasswordBatch, enabling weak password recovery. Exploitation can be remote, with public exploits noted (PoC ma...

Sixun Shanghui Business Management System 安全漏洞

Sixun Shanghui Business Management System is a group business management system from Sixun, China. A security vulnerability exists in Sixun Shanghui Business Management System version 4.10.24.3, which originates from an accessible file or directory issue in File/ExportFiles...

CVE-2025-14697: Files or Directories Accessible to External Parties

A security flaw has been discovered in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this issue is some unknown functionality of the file /ExportFiles/. The manipulation results in files or directories accessible. The attack may be launched remotel...

CVE-2025-14696: Weak Password Recovery Mechanism for Forgotten Password

A vulnerability was identified in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 4.10.24.3. Affected by this vulnerability is an unknown functionality of the file /api/GylOperator/UpdatePasswordBatch. The manipulation leads to weak password recovery. The attack may be...

Sixun Shanghui Business Management System 授权问题漏洞

Sixun Shanghui Business Management System is a group business management system from Sixun, a Chinese company. An authorization issue vulnerability exists in Sixun Shanghui Business Management System version 4.10.24.3, which stems from a weak password recovery issue in...

VulnCheck KEV: CVE-2025-4281

A vulnerability, which was classified as problematic, was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This affects an unknown part of the file /api/GylOperator/LoadData. The manipulation leads to information disclosure. It is possible to initiate the attack...

CVE-2025-4281

A vulnerability, which was classified as problematic, was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This affects an unknown part of the file /api/GylOperator/LoadData. The manipulation leads to information disclosure. It is possible to initiate the attack...

Sixun Shanghui Business Management System 访问控制错误漏洞

Sixun Shanghui Business Management System is a group business management system from Sixun, a Chinese company. An access control error vulnerability exists in Sixun Shanghui Business Management System version 7, which stems from improper handling of files/api/GylOperator/LoadData, which could lea...

CVE-2025-4281: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as problematic, was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This affects an unknown part of the file /api/GylOperator/LoadData. The manipulation leads to information disclosure. It is possible to initiate the attack...

Sixun Shanghui Business Management System 安全漏洞

Sixun Shanghui Business Management System is a group business management system from Sixun, a Chinese company. A security vulnerability exists in Sixun Shanghui Business Management System version 7, which stems from an incorrect operation of the parameter OperId that can lead to improper...

CVE-2025-2114: Improper Authorization

A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of t...