CVE-2026-37428

The qihang-wms intelligent warehousing management system contains a SQL injection vulnerability within commit 75c15a . The flaw exists in the datascope parameter located in the SysDeptMapper.xml file. An attacker exploiting this vulnerability could gain unauthorized access to sensitive database i...

CVE-2026-37428

qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysDeptMapper.xml file. This vulnerability allows attackers to access sensitive database information, including users' Personally Identifiable Information PII...

PT-2026-40604

qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysDeptMapper.xml file. This vulnerability allows attackers to access sensitive database information, including users' Personally Identifiable Information PII...