PT-2026-97572

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description The User Password Handler component contains a flaw where the MD5.getMD5 function in the ssm pro/src/main/java/cn/sfturing/utils/MD5.java file implements a...

PT-2026-97534

A vulnerability has been found in sfturing hosp order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssm pro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Such manipulation leads to cleartext storage of sensitive informatio...

PT-2026-97553

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A remote attack can lead to cross-site request forgery, which occurs when a malicious site tricks a user's browser into performing an unwanted action on a...

PT-2026-97552

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A remote manipulation of the getProperties function within the ssm pro/src/main/java/cn/sfturing/utils/MailUtil.java file leads to the cleartext transmissi...

PT-2026-96719

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A remote cross site scripting issue exists within the Public Search Handlers component, specifically in the HospitalController.java file. The flaw allow...

PT-2026-86616

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A remote authorization bypass exists within the Order Controller component. The issue occurs in an unknown function located in the file ssm...

PT-2026-86619

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description An authorization bypass exists in the Order Cancellation component. A remote attacker can manipulate the ID argument within the...

PT-2026-86615

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description A security flaw in the Password Recovery component allows for an unverified password change via remote exploitation. The issue resides in the...

PT-2026-86618

Name of the Vulnerable Software and Affected Versions sfturing hosp order versions prior to 627f426331da8086ce8fff2017d65b1ddef384f8 Description An authorization bypass exists in the Order Handler component. A remote attacker can manipulate the userID or id arguments within the updateOrderSta1 an...

CVE-2025-6766 sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection

A vulnerability was found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. It has been declared as critical. This vulnerability affects the function getOfficeName of the file OfficeServiceImpl.java. The manipulation of the argument officesName leads to sql injection. The atta...

PT-2025-27147 · Unknown · Sfturing Hosp Order

Name of the Vulnerable Software and Affected Versions: sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description: A critical issue was found in the getOfficeName function of the OfficeServiceImpl.java file, which is vulnerable to SQL injection through the manipulatio...

PT-2025-27149 · Unknown · Sfturing Hosp Order

Name of the Vulnerable Software and Affected Versions: sfturing hosp order versions up to 627f426331da8086ce8fff2017d65b1ddef384f8 Description: A critical issue affects the findDoctorByCondition function of the DoctorServiceImpl.java file. The manipulation of the hospitalName argument leads to SQ...