Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/01/30 3:24 a.m.•24 views

CVE-2026-1546

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

9.8CVSS6.2AI score0.00373EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/01/28 10:02 p.m.•32 views

CVE-2026-1546 jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

5.3CVSS6.2AI score0.00373EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2026/01/28 10:02 p.m.•62 views

CVE-2026-1546 jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

6.5CVSS0.00373EPSS
SaveExploits1References6
attackerkb
attackerkb
•added 2026/01/28 10:02 p.m.•13 views

CVE-2026-1546

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

6.5CVSS6.2AI score0.00373EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/28 12:00 a.m.•42 views

PT-2026-5231

Name of the Vulnerable Software and Affected Versions jishenghua jshERP versions up to 3.6 Description A security issue exists in jishenghua jshERP. The getBillItemByParam function within the com.jsh.erp.datasource.mappers.DepotItemMapperEx component, located in the file...

9.8CVSS6.1AI score0.00373EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/28 12:00 a.m.•11 views

CVE-2026-1546: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

9.8CVSS6.2AI score0.00373EPSS
SaveExploits1References1
Rows per page
Query Builder