Shenzhen Mingyuan Cloud Technology Co., Ltd Mingyuan Cloud ERP suffers from SQL injection vulnerability (CNVD-2025-18511)

Mingyuan Cloud ERP is a Business Management software developed by Mingyuan Cloud Technology Co. Ltd. Mingyuan Cloud ERP SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2025-2358 Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System HTTP Header Service.asmx sql injection

A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Kfxt/Service.asmx of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For lead...

CVE-2025-2358 Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System HTTP Header Service.asmx sql injection

A vulnerability was found in Shenzhen Mingyuan Cloud Technology Mingyuan Real Estate ERP System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /Kfxt/Service.asmx of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For lead...

Mingyuan Cloud Real Estate ERP System 注入漏洞

Mingyuan Cloud Real Estate ERP System is a real estate business management software from China-based Mingyuan Cloud. An injection vulnerability exists in Mingyuan Cloud Real Estate ERP System version 1.0, which originates from SQL injection and could allow a remote attacker to obtain, update, and...

Unauthorized Access Vulnerability in Mingyuan Cloud ERP System

Headquartered in Shenzhen, China, Shenzhen Mingyuan Cloud Technology Co., Ltd. is a leading real estate ecosystem digital service provider in China. An unauthorized access vulnerability exists in the Mingyuan Cloud ERP system, which can be exploited by attackers to obtain sensitive information...

Mingyuan Cloud ERP has information leakage vulnerability

Shenzhen Mingyuan Cloud Technology Co., Ltd. is a real estate ecosystem digital service provider. Information leakage vulnerability exists in Mingyuan Cloud ERP. Attackers can utilize the vulnerability to obtain sensitive information...

Mingyuan Cloud - Command Execution Vulnerability in Data Center

Shenzhen Mingyuan Cloud Technology Co., Ltd hereinafter referred to as: Mingyuan Cloud, is a real estate ecosystem digital service provider. A command execution vulnerability exists in Mingyuan Cloud-Data Center. An attacker can exploit the vulnerability to gain server privileges...

Mingyuan Cloud Data Center has a logic flaw vulnerability

Shenzhen Mingyuan Cloud Technology Co., Ltd. is a digital service provider of real estate ecological chain. A logic flaw vulnerability exists in the Mingyuan Cloud Data Center. Attackers use the vulnerability to access the backend interface and obtain sensitive information by intercepting data...