CGA-G47C-PVHX-6HFX

Bulletin has no description...

CGA-CMJ2-X624-6CVX

Bulletin has no description...

CGA-5MF7-W2V2-4X3R

Bulletin has no description...

CGA-779H-R7MP-VXRG

Bulletin has no description...

CGA-6883-Q267-63X4

Bulletin has no description...

CGA-484H-632P-8C4H

Bulletin has no description...

CGA-33GW-Q7HR-G2JC

Bulletin has no description...

CGA-39XR-7HCV-9QMF

Bulletin has no description...

CGA-38C2-5HR9-5R4Q

Bulletin has no description...

CGA-3GVM-QJ84-QHJ9

Bulletin has no description...

CGA-3G55-W6Q5-VH7M

Bulletin has no description...

EUVD-2026-4847

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

CVE-2026-1546

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

CVE-2026-1546 jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads ...

CVE-2026-1546

CVE-2026-1546 affects jishenghua jshERP up to version 3.6. The vulnerability is an SQL injection in DepotItemMapperEx.getBillItemByParam (file /jshERP-boot/depotItem/importItemExcel) triggered by manipulating the barCodes parameter. It can be exploited remotely and has been publicly disclosed. Re...

CVE-2025-70336

A Stored cross-site scripting XSS vulnerability in 'Create New Live Item' in PodcastGenerator 3.2.9 allows remote attackers to inject arbitrary script or HTML via the 'TITLE', 'SHORT DESCRIPTION' and 'LONG DESCRIPTION' parameters. The saved payload gets executed on 'View All Live Items' and 'Live...

MINI-WH22-F3X5-49XW

Bulletin has no description...

MINI-Q6H8-26FF-2VJ3

Bulletin has no description...

CGA-V372-7MWW-3J5H

Bulletin has no description...

jshERP SQL Injection Vulnerability

jshERP Huaxia ERP is a domestic ERP system developed by Ji Shenghua. Versions of jshERP 3.6 and earlier had a SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the parameter “barCodes” in the “getBillItemByParam” function located in the...