CVE-2025-0406

CVE-2025-0406 affects liujianview gymxmjpa 1.0. The vulnerable component is the function inside SubjectDaoImpl in SubjectController.java; the argument subname is susceptible to SQL injection. This can be exploited remotely and the exploit has been publicly disclosed. Multiple sources corroborate ...

CVE-2024-13042 Tsinghua Unigroup Electronic Archives Management System download.html download information disclosure

A vulnerability was found in Tsinghua Unigroup Electronic Archives Management System 3.2.21080262532. It has been classified as problematic. Affected is the function download of the file /Searchnew/Subject/download.html. The manipulation of the argument path leads to information disclosure. It is...

CVE-2024-13042

CVE-2024-13042 affects Tsinghua Unigroup Electronic Archives Management System 3.2.210802(62532). The vulnerability is in the download function at /Searchnew/Subject/download.html where manipulation of the argument path enables information disclosure. It is exploitable remotely, and public PoC/pu...