CVE-2026-108773

The erzhongxmu JEEWMS software (versions up to 2026.09.27-W39 ) is vulnerable to a SQL injection flaw in the docheck function located within src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. An attacker can initiate a remote attack by manipulating the goodscode argument. The docum...