Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/01/30 3:24 a.m.•24 views

CVE-2026-1546

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

9.8CVSS6.2AI score0.00379EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/01/28 10:02 p.m.•12 views

CVE-2026-1546

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

6.5CVSS5.7AI score0.00379EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2026/01/28 10:02 p.m.•57 views

CVE-2026-1546 jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

6.5CVSS0.00379EPSS
SaveExploits1References6
OSV
OSV
•added 2026/01/28 10:02 p.m.•19 views

CVE-2026-1546 jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

5.3CVSS6.3AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•7 views

CVE-2026-1546: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

9.8CVSS6.2AI score0.00379EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•38 views

PT-2026-5231

Name of the Vulnerable Software and Affected Versions jishenghua jshERP versions up to 3.6 Description A security issue exists in jishenghua jshERP. The getBillItemByParam function within the com.jsh.erp.datasource.mappers.DepotItemMapperEx component, located in the file...

9.8CVSS6.5AI score0.00379EPSS
SaveExploits1References12
Rows per page
Query Builder