CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2025-25992

A SQL Injection vulnerability exists in FeMiner wms version 1.0 , a warehouse management system. The flaw is caused by a lack of validation for externally entered SQL statements within the inquire_inout_item.php component. A remote attacker can exploit this vulnerability to execute illegal SQL co...

CVE-2025-25992

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

PT-2025-7120 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the "inquire inout item.php" component. Recommendations: For FeMiner wms version 1.0, consider restricting access to...

CVE-2025-25997

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...

CVE-2025-25994: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

CVE-2025-25992: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

CVE-2025-25993

FeMiner wms version 1.0 is vulnerable to a SQL Injection vulnerability (CWE-89) via the "itemid" parameter. A remote attacker can exploit this flaw to obtain sensitive information from the system. As of the current documentation, no newer version containing a fix has been released. It is recommen...

CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2025-25997

FeMiner wms v.1.0 is susceptible to a Directory Traversal vulnerability in the databak.php component. This flaw allows a remote attacker to traverse the file system to obtain sensitive information and access confidential data. A proof-of-concept exploit has been published and is publicly availabl...

CVE-2025-25994

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

CVE-2025-25997

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...

PT-2025-7121 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner WMS version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the itemid parameter. Recommendations: For FeMiner WMS version 1.0, avoid using the parameter itemid in the affected...

PT-2025-7122 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information through the parameters date1, date2, and id. This is due to a SQL injection vulnerability. Recommendations: For FeMiner wms version 1.0,...

CVE-2025-25993: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2025-25994

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

CVE-2025-25992

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

CVE-2025-25997

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...

FeMiner wms 安全漏洞

FeMiner wms is a warehouse management system for Chinese front-end miners FeMiner individual developers. A SQL injection vulnerability exists in FeMiner wms version 1.0, which stems from the lack of validation of the date1, date2, id parameters against externally entered SQL statements. An attack...

CVE-2025-25997: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...