CVE-2026-2682 Tsinghua Unigroup Electronic Archives System prinReport.html sql injection

A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.21080262532. Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. The attack can be launched remotely. The...

Tsinghua Unigroup Electronic Archives System SQL注入漏洞

Tsinghua Unigroup Electronic Archives System is an electronic archive management system of Tsinghua Unigroup. Versions of Tsinghua Unigroup Electronic Archives System 3.2.21080262532 and earlier have a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter...