CVE-2025-4863

Summary: CVE-2025-4863 affects Advaya Softech GEMS ERP Portal 2.1, targeting the /studentLogin/studentLogin.action endpoint. The vulnerability arises from manipulation of the userId parameter, enabling SQL injection and remote initiation. Public disclosures and PoC materials exist (e.g., GEMS_POC...

CVE-2025-15170

Vulnerability summary (CVE-2025-15170) : Advaya Softech GEMS ERP Portal (≤ 2.1) contains a cross-site scripting flaw in the Error Message Handler. The issue arises from improper manipulation of the Message parameter in the file /home.jsp?isError=true, allowing remote exploitation. Public exploit ...