Lucene search
+L

6 matches found

OSV
OSV
•added 2025/03/02 9:15 a.m.•20 views

CVE-2025-1812

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.6AI score0.0062EPSS
SaveExploits1References4
Mend
Mend
•added 2025/03/02 9:00 a.m.•6 views

CVE-2025-1812

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS0.0062EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/02 9:00 a.m.•79 views

CVE-2025-1812

CVE-2025-1812 affects the GetUserOrg function in SuperZ.java (path: com/futvan/z/framework/core/SuperZ.java). The issue is SQL injection caused by manipulation of the userId argument, enabling remote exploitation. Several sources confirm remote exploitability and public disclosure; vendor respons...

8.8CVSS6.8AI score0.0062EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/03/02 9:00 a.m.•50 views

CVE-2025-1812 zj1983 zz SuperZ.java GetUserOrg sql injection

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.0062EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/03/02 12:00 a.m.•5 views

PT-2025-9207

Name of the Vulnerable Software and Affected Versions zj1983 zz versions up to 2024-08 Description A critical vulnerability has been found in the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to SQL injection. It is possible...

8.8CVSS0.0062EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/02 12:00 a.m.•8 views

CVE-2025-1812: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS6.3AI score0.0062EPSS
SaveExploits1References1
Rows per page
Query Builder