CVE-2025-3135

CVE-2025-3135 affects fcba_zzm ICT-park Smart Park Management System (version 2.1). The vulnerability is in the unknown code path of /api/system/dept/update and leads to SQL injection. It can be exploited remotely and has documented public exploit exposure. Public sources consistently describe a ...

CVE-2025-10398

CVE-2025-10398 affects fcba_zzm ics-park Smart Park Management System 2.0. The vulnerability is in FileUploadUtils.java where manipulation of the File parameter enables unrestricted upload. Exploitation is possible remotely and public exploits are reported. Multiple connected sources corroborate ...

CVE-2025-10394

Vulnerability: fcba_zzm ics-park Smart Park Management System 2.0, in the Scheduled Task Module. Affected file: ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/JobController.java, within the Scheduled Task Module. Root cause: an unknown function in that file allows manipulation leading to ...