CPAS Management System - Arbitrary File Read Detection

The CPAS Audit Management System has been found to contain a vulnerability that allows arbitrary file read. This security flaw can be exploited by attackers to access sensitive files on the server, potentially exposing critical system information. The vulnerability can be triggered by sending a...

CVE-2025-57529: Improper Neutralization of Special Elements used in an SQL Command

YouDataSum CPAS Audit Management System =v4.9 is vulnerable to SQL Injection in /cpasList/findArchiveReportByDah due to insufficient input validation. This allows remote unauthenticated attackers to execute arbitrary SQL commands via crafted input to the parameter. Successful exploitation could...

📄 CPAS Audit Management Information System 4.9 SQL Injection

CPAS Audit Management Information System versions 4.9 and below suffer from a remote SQL injection vulnerability. CPAS-bug CPAS audit management information system has SQL injection vulnerability Beijing YouDataSum Technology Co., Ltd. domain: http://youdatasum.com Affected versions...

Arbitrary File Download Vulnerability in IDC Information Security Audit Management System of Renzihang

Ltd. is one of the earliest enterprises in China to be involved in the field of network information security, and is committed to providing overall solutions for network auditing and supervision for state management organizations, operators, enterprises and institutions. There is an arbitrary fil...