CVE-2026-108774

A SQL injection vulnerability exists in erzhongxmu JEEWMS (up to version 2026.09.27-W39 ). The flaw is located within the getbinall and getbinallagv functions of the file src/main/java/com/zzjee/md/controller/MdBinController.java. An attacker can exploit this by manipulating the binstore/binid/de...

PT-2026-110351

A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBinController.java. Executing a manipulation of the argument binstore/binid/des/cengshu can lead to sql injection. The...