JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS versions prior to v2025.01.01. An attacker exploiting this vulnerability can bypass privileges via component/authInterceptors/AuthInterceptor.cava...

CVE-2024-57761

An arbitrary file upload vulnerability in the parserXML method of JeeWMS before v2025.01.01 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-57760

JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java...

CVE-2024-57760

JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java...

CVE-2024-57757

JeeWMS (pre-2025.01.01) contains a permission bypass in the component /interceptors/AuthInterceptor.cava. The issue enables elevated access without user interaction and is reported with a CVSS 3.1 vector targeting high confidentiality impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Affected version...

CVE-2024-57760

CVE-2024-57760 affects JeeWMS prior to v2025.01.01. A SQL injection vulnerability exists via the ReportId parameter at /core/CGReportDao.java. The CVSS 3.1 base score is 6.5 (Confidentiality impact: High; other impacts: None/Not affected). Public documents confirm the issue and affected version r...

CVE-2025-0392

CVE-2025-0392 affects Guangzhou Huayi Intelligent Technology Jeewms. The vulnerability targets the datagridGraph function in /graphReportController.do, where manipulating the store_code parameter results in SQL injection. It is exploitable remotely, and public disclosure is noted. Remediation per...

CVE-2025-0392 Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection

A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument storecode leads to sql injection. It is possible to launch t...

CVE-2025-0392 Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection

A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument storecode leads to sql injection. It is possible to launch t...

CVE-2025-0391

A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function saveOrUpdate of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController. java. The manipulation leads to sql...

CVE-2025-0391 Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection

A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function saveOrUpdate of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController. java. The manipulation leads to sql...

CVE-2025-0391 Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection

A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function saveOrUpdate of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController. java. The manipulation leads to sql...

CVE-2025-0391

CVE-2025-0391 affects Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. The issue is a SQL injection in the function saveOrUpdate within org/jeecgframework/web/cgform/controller/build/CgFormBuildController.java, enabling remote exploitation. Public exploit/public disclosure is indicat...

CVE-2025-0390

A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability affects unknown code of the file /wmOmNoticeHController.do. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploi...

CVE-2025-0390

CVE-2025-0390 affects Guangzhou Huayi Intelligent Technology’s JeeWMS up to version 20241229. The issue is a path traversal in the unknown-code path to /wmOmNoticeHController.do, exploitable remotely over a network with no authentication, using traversal '../filedir'. The vulnerability is publicl...

CVE-2025-0390 Guangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal

A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability affects unknown code of the file /wmOmNoticeHController.do. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploi...

JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the parameter storecode...

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from vulnerability to path traversal attacks...

PT-2025-3861 · Guangzhou Huayi Intelligent Technology · Jeewms

Name of the Vulnerable Software and Affected Versions: Guangzhou Huayi Intelligent Technology Jeewms versions up to 20241229 Description: A critical issue was found in the software, affecting the file /wmOmNoticeHController.do, which allows for path traversal using '../filedir'. This can be...

PT-2025-3862 · Guangzhou Huayi Intelligent Technology · Jeewms

The vulnerable software is Guangzhou Huayi Intelligent Technology Jeewms, specifically versions up to 20241229. The vulnerability is a critical SQL injection issue that affects the function saveOrUpdate of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController.java. This...