CVE-2026-94495 jshERP through 3.6 Missing Authorization via systemConfig

jshERP through 3.6 fails to properly validate user privileges in SystemConfigService.updateSystemConfig, allowing authenticated users to modify tenant system configuration. Attackers can rewrite or delete tenant-wide settings covering company identity, stock rules, approval behavior, and printing...

CVE-2026-94495 jshERP through 3.6 Missing Authorization via systemConfig

jshERP through 3.6 fails to properly validate user privileges in SystemConfigService.updateSystemConfig, allowing authenticated users to modify tenant system configuration. Attackers can rewrite or delete tenant-wide settings covering company identity, stock rules, approval behavior, and printing...

CVE-2026-94495: Missing Authorization

jshERP through 3.6 fails to properly validate user privileges in SystemConfigService.updateSystemConfig, allowing authenticated users to modify tenant system configuration. Attackers can rewrite or delete tenant-wide settings covering company identity, stock rules, approval behavior, and printing...

TOPSEC TopACM 操作系统命令注入漏洞

TOPSEC TopACM is an application access control and security management system developed by TOPSEC Corporation in China. Version 3.0 of TOPSEC TopACM contains a vulnerability related to operating system command injection. This vulnerability arises from incorrect handling of parameters in the...

MAL-2024-6091 Malicious code in systemconfig (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in systemconfig (PyPI)

--- -= Per source details. Do not edit below this line.=-...

jshERP Security Vulnerabilities

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of China's Ji Sheng Hua. A security vulnerability exists in jshERP v3.3. The vulnerability stems from the fact that the jshERP-boot/systemConfig/upload interface does not check the uploaded file type and can splice biz...