2689 matches found
CVE-2025-4530 feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal
A vulnerability was found in fenghaha/megagao ssm-erp and productionssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function handleFileDownload of the file FileController.java of the component File Handler. The manipulation leads to path traversal. The attack c...
CVE-2025-4530
CVE-2025-4530 affects feng_ha_ha/megagao ssm-erp and production_ssm 1.0. the vulnerability resides in File Handler’s FileController.java handleFileDownload, enabling path traversal. exploitation is remote and publicly disclosed. Exploits are noted in multiple sources; CVSS metrics from the initia...
ssm-erp 路径遍历漏洞
ssm-erp is a production management ERP system by fenghaha individual developer. A path traversal vulnerability exists in ssm-erp version 1.0, which stems from an incorrect operation of the file FileController.java that results in path traversal...
CVE-2025-4333
A vulnerability was found in fenghaha/megagao ssm-erp and productionssm up to 0.0.1. It has been classified as critical. This affects the function uploadFile of the file src/main/java/com/megagao/production/ssm/service/impl/FileServiceImpl.java. The manipulation of the argument uploadFile leads t...
ssm-erp 安全漏洞
ssm-erp is a production management ERP system by fenghaha individual developer. A security vulnerability exists in ssm-erp 0.0.1 and earlier versions, which stems from the mishandling of the parameter uploadFile by the function uploadFile, which could lead to arbitrary file uploads...
Command Execution Vulnerability in UFIDA U8Cloud at UFIDA Network Technology Co.
UFIDA U8Cloud is an enterprise-level ERP used to assist companies in achieving efficient and digitalized business collaboration and process management. A command execution vulnerability exists in UFIDA U8Cloud, which can be exploited by an attacker to execute arbitrary commands...
CVE-2025-3552
A vulnerability was found in Lingxing ERP 2. It has been classified as critical. This affects an unknown part of the file /Api/TinyMce/UploadAjax.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclose...
CVE-2025-3551
A vulnerability was found in Lingxing ERP 2 and classified as critical. Affected by this issue is the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been...
Exploit for Cross-site Scripting in Jquery
SQL Injection Vulnerability in Advaya GEMS ERP Portal v2.1 ⚠️...
CVE-2025-3552
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor was not able to verify the existence of the original vulnerability report and the researche...
CVE-2025-3552
CVE-2025-3552 is rejected/not used; this CVE entry does not represent an active vulnerability.
CVE-2025-3551
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The vendor was not able to verify the existence of the original vulnerability report and the researche...
CVE-2025-3551
CVE-2025-3551 is rejected/not used; not an active vulnerability.
PT-2025-16203 · Unknown · Lingxing Erp
Name of the Vulnerable Software and Affected Versions: Lingxing ERP version 2 Description: A critical issue was found in the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. This issue can be exploited remotely...