CVE-2025-1797 Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System anyUserBoundHouse.php sql injection

A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System up to 20250217. Affected by this issue is some unknown functionality of the file /wuser/anyUserBoundHouse.php. The manipulation of the...

CVE-2025-1797

CVE-2025-1797 affects the Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System (up to 20250217). The vulnerability is in the file /wuser/anyUserBoundHouse.php where manipulation of the argument huid leads to an SQL injection . The attack can be launched remot...