CVE-2026-3969

CVE-2026-3969 affects FeMiner wms up to 1.0. The vulnerability lies in /wms-master/src/basic/depart/depart_add_bg.php (Basic Organizational Structure Module): manipulating the Name argument enables SQL injection. Attack vector is network with low complexity and no privileges required; remote expl...

CVE-2026-3969: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/departaddbg.php of the component Basic Organizational Structure Module. Performing a manipulation of the argument Name results in sql injection. The attack may be...