CVE-2025-8702: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This affects an unknown part of the file /CommonSolution/GetVariableByOneIDNew of the component Historical Data Query Module. The manipulation of the argument ObjectID leads to...

CVE-2025-8703: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This vulnerability affects unknown code of the file /WEASHomePage/GetAreaTrendChartData of the component Environmental Real-Time Data Module. The manipulation of the argument energy...

CVE-2025-8705: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. Affected is an unknown function of the file /WEASHomePage/GetTargetConfig of the component Energy Overview Module. The manipulation of the argument BPProID leads to sql...

CVE-2025-8704: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. This issue affects some unknown processing of the file /WEASAlarmResult/GetAlarmResultProcessList of the component Analysis Conclusion Query Module. The manipulatio...

CVE-2025-8706: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /CommonSolution/CreateFunctionLog of the component Energy Overview Module. The manipulation of the...

CVE-2025-8701: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /OLOprationLog/GetPageList. The manipulation of the argument optUser leads to sql injection. The attack may ...

SQL Injection Vulnerability in WOES Intelligent Optimization and Energy Saving System of Wanzhou Electric Co.

WOES Intelligent Optimization and Energy Saving System is a set of energy online monitoring and analysis management system with the core purpose of energy saving and consumption reduction. WOES Intelligent Optimization and Energy Saving System of Wanzhou Electric Co., Ltd. suffers from a SQL...