CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2025-25997

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...

CVE-2025-25994

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

CVE-2025-25992

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

CVE-2025-25997

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...

CVE-2025-25992

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

CVE-2025-25994

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

CVE-2025-25992

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

PT-2025-7122 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information through the parameters date1, date2, and id. This is due to a SQL injection vulnerability. Recommendations: For FeMiner wms version 1.0,...

FeMiner wms 安全漏洞

FeMiner wms is a warehouse management system for Chinese front-end miners FeMiner individual developers. A SQL injection vulnerability exists in FeMiner wms version 1.0, which stems from the lack of validation of the date1, date2, id parameters against externally entered SQL statements. An attack...

CVE-2025-25993

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."...

PT-2025-7120 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the "inquire inout item.php" component. Recommendations: For FeMiner wms version 1.0, consider restricting access to...

CVE-2025-25992

SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquireinoutitem.php component...

CVE-2025-25997

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...

CVE-2025-25997

Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php component...

CVE-2025-25994

SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1, date2, id...

CVE-2025-25992

CVE-2025-25992 corresponds to a SQL injection in FeMiner wms 1.0. Multiple connected sources (CNVD-2025-03952, RH, NVD, CNNVD) describe the issue as arising from the lack of validation of externally entered SQL statements in the iquel_inout_item.php component, enabling an attacker to obtain sensi...

PT-2025-7121 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner WMS version 1.0 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the itemid parameter. Recommendations: For FeMiner WMS version 1.0, avoid using the parameter itemid in the affected...

CVE-2025-25997

CVE-2025-25997 describes a Directory Traversal vulnerability in FeMiner wms v1.0, where a remote attacker can obtain sensitive information via the databak.php component. The CVSS v3.1 base metrics indicate NETWORK attack vector, LOW attack complexity, NO privileges required, NO user interaction, ...