Lucene search
K

4 matches found

OSV
OSV
added 2025/10/12 7:15 a.m.1 views

CVE-2025-11629

A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vend...

9.8CVSS5.5AI score0.00044EPSS
Exploits1References4
OSV
OSV
added 2025/03/02 9:15 p.m.1 views

CVE-2025-1832

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to sql injection. The attack can be launched...

8.8CVSS5.6AI score0.0006EPSS
Exploits1References4
CVE
CVE
added 2025/03/02 9:0 p.m.63 views

CVE-2025-1832

CVE-2025-1832 affects the function getUserList in src/main/java/com/futvan/z/system/zrole/ZroleAction.java of zj1983 zz up to 2024-8. The vulnerability arises from manipulation of the roleid argument, leading to SQL injection. Exploitation is network-accessible and was disclosed publicly, enablin...

8.8CVSS7.5AI score0.0006EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2025/03/02 9:0 p.m.21 views

CVE-2025-1832 zj1983 zz ZroleAction.java getUserList sql injection

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to sql injection. The attack can be launched...

6.5CVSS0.0006EPSS
Exploits1References4
Rows per page
Query Builder