PT-2025-30914 · Unknown · Deerwms Deer-Wms-2

Name of the Vulnerable Software and Affected Versions: deerwms deer-wms-2 versions up to 3.3 Description: A critical vulnerability exists in deerwms deer-wms-2. The issue is related to SQL injection, stemming from the manipulation of the paramsdataScope argument within the file /system/dept/list...

PT-2025-30901 · Unknown · Deerwms Deer-Wms-2

Name of the Vulnerable Software and Affected Versions: deerwms deer-wms-2 versions up to 3.3 Description: A critical vulnerability exists in deerwms deer-wms-2. The vulnerability is due to SQL injection, which can be triggered by manipulating the paramsdataScope argument in the /system/role/expor...

PT-2025-30718 · Unknown · Deerwms Deer-Wms-2

Name of the Vulnerable Software and Affected Versions: deerwms deer-wms-2 versions up to 3.3 Description: A vulnerability exists in deerwms deer-wms-2 that allows for SQL injection. The issue is related to the manipulation of the paramsdataScope argument within the file...

deer-wms-2 注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source . The vulnerability exists in deerwms deer-wms-2 3.3 and earlier versions, the vulnerability stems from incorrect manipulation of the parameter paramsdataScope in the file /system/user/list resulting in SQL injection...

PT-2025-30724 · Deerwms · Deerwms

Name of the Vulnerable Software and Affected Versions: deerwms versions 2.0 through 3.3 Description: A critical vulnerability exists in deerwms that allows for SQL injection. The issue is located in the file /system/user/list and involves manipulation of the paramsdataScope argument. This allows...

CVE-2025-8124 deerwms deer-wms-2 unallocatedList sql injection

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /system/role/authUser/unallocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack can be...

CVE-2025-8124

CVE-2025-8124 affects deer-wms-2 up to 3.3. The vulnerability is an SQL injection in the file /system/role/authUser/unallocatedList triggered by manipulating the params[dataScope] argument. It can be exploited remotely and exploitation has been publicly disclosed. Several connected sources list v...

CVE-2025-8124 deerwms deer-wms-2 unallocatedList sql injection

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /system/role/authUser/unallocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack can be...

CVE-2025-8123 deerwms deer-wms-2 edit sql injection

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-8123

CVE-2025-8123 affects deerwms deer-wms-2 up to 3.3 . A SQL injection flaw exists in an unknown function of the API endpoint at /system/dept/edit , caused by manipulation of the ancestors parameter. It can be exploited remotely and, per sources, the exploit has been publicly disclosed. Multiple co...

PT-2025-30710 · Unknown · Deerwms Deer-Wms-2

Name of the Vulnerable Software and Affected Versions: deerwms deer-wms-2 versions up to 3.3 Description: A vulnerability exists in deerwms deer-wms-2 that allows for SQL injection. The issue is located in the file /system/role/authUser/unallocatedList. Manipulation of the paramsdataScope argumen...

PT-2025-30702 · Unknown · Deerwms Deer-Wms-2

Name of the Vulnerable Software and Affected Versions: deerwms deer-wms-2 versions 2.0 through 3.3 Description: A critical issue exists in deerwms deer-wms-2. The vulnerability is due to a SQL injection flaw within an unknown function of the /system/dept/edit API endpoint. The ancestors parameter...