EUVD-2026-66700

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution. The sqlResource.sql parameter is stored in the treportsqlresource table through the ReportController.save interface and directly embedded into Hibernate native queries without any parameterization or...

CVE-2026-75334

The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution . The sqlResource.sql parameter, accepted through the ReportController.save() interface, is stored in the t_report_sql_resource table and then directly embedded into Hibernate native queries without any...

Unauthorized Access Vulnerability in smart-web2

smart-web2 is a relatively simple OA system. An unauthorized access vulnerability exists in smart-web2, which can be exploited by an attacker to obtain sensitive information...