CVE-2025-9391

A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remotely. The exploit has been made...

CVE-2025-9391

Vulnerability CVE-2025-9391 affects Bjskzy Zhiyou ERP (versions up to 11.x). The flaw is in com.artery.workflow.ServiceImpl.getFieldValue, where improper handling of the sql argument enables SQL injection. Exploitation can be remote and publicly available PoCs are reported. Affected products and ...