CVE-2025-25382

CVE-2025-25382 affects Information Kerala Mission SANCHAYA v3.0.4 (Property Tax Payment Portal). A crafted request allows an attacker to arbitrarily modify payment amounts. The exact root cause is not explicitly detailed in the provided documents. Reported remediation suggestions include restrict...

Cangzhou Jialan Network Technology Co., Ltd. virtual goods automatic delivery system there are logical flaws vulnerabilities

JiaBlue virtual goods automatic delivery system is the latest one-stop self-service delivery platform launched by JiaBlue Technology, which supports automatic delivery of virtual goods, paid article reading, paid audio and video, paid gallery and so on. The whole process does not require human...

Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system fashion version of the existence of logic flaws vulnerability

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shijiazhuang City Zhenghong Network Technology Co., Ltd. Shop7z online shopping system fashion version of the existence of logical flaws in the...

Logic Flaw Vulnerability in Shop7 Online Shopping System Flagship Edition

Shop7 online shopping system flagship version is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer version and cell phone version and APP seamless combination of data as a whole. Shop7 online shopping system flagship version of the existence of logical flaws in...

Payment Logic Vulnerability in Cloud Industry CMS ca***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. Payment logic vulnerability exists in the CMS ca.php file. Attackers can use this vulnerability to arbitrarily modify the size of the payment amount...