Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
•added 2025/08/24 2:32 p.m.•5 views

CVE-2025-9391 Bjskzy Zhiyou ERP com.artery.workflow.ServiceImpl getFieldValue sql injection

A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remotely. The exploit has been made...

6.5CVSS7.3AI score0.00418EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/08/24 2:32 p.m.•27 views

CVE-2025-9391 Bjskzy Zhiyou ERP com.artery.workflow.ServiceImpl getFieldValue sql injection

A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remotely. The exploit has been made...

6.5CVSS0.00418EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/24 12:00 a.m.•0 views

CVE-2025-9391: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remotely. The exploit has been made...

9.8CVSS5.4AI score0.00418EPSS
SaveExploits1References1
Rows per page
Query Builder