CVE-2025-2114

A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of t...

CVE-2025-2114

creationtimestamp| type| source ---|---|--- 2025-03-09 04:37:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6955 2025-03-09 06:55:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljwhfxlnas2h 2025-03-09 07:54:49+00:00| seen|...

CVE-2025-2114

CVE-2025-2114 affects Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7, specifically the Reset Password Interface component and its OperatorStop.asp handling. The root cause is improper authorization due to manipulation of the OperId parameter in that endpoint, which may ...