CVE-2025-15427

CVE-2025-15427 concerns a SQL injection in Seeyon Zhiyuan OA Web Application System, triggered by manipulating the CAR_BRAND_NO argument in the file /carManager/carUseDetailList.js%73p. Multiple sources confirm remote-exploitability and a publicly released exploit. Affected software includes Seey...

CVE-2025-15427

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor mentioned in the original disclosure filed a report that this issue affects a different vendor. The research...

PT-2026-1046

Name of the Vulnerable Software and Affected Versions Seeyon Zhiyuan OA Web Application System versions prior to 20251222 Description A security flaw exists in Seeyon Zhiyuan OA Web Application System. The issue involves a SQL injection impacting an unknown function within the file...