Organization Portal System Security Vulnerabilities and Issues — Organization Portal System CVE List

Lucene search

WellchooseOrganization Portal System

6 matches found

CVE•added 2025/08/13 9:15 a.m.•8 views

CVE-2025-8911

Organization Portal System developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

6.1CVSS7.5AI score0.00047EPSS

CVE•added 2025/08/13 10:15 a.m.•7 views

CVE-2025-8912

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing unauthenticated remote attackers to exploit Absolute Path Traversal to download arbitrary system files.

8.7CVSS7.5AI score0.0009EPSS

CVE•added 2025/08/13 10:15 a.m.•7 views

CVE-2025-8913

Organization Portal System developed by WellChoose has a Local File Inclusion vulnerability, allowing unauthenticated remote attackers to execute arbitrary code on the server.

9.8CVSS8.3AI score0.00264EPSS

CVE•added 2025/08/13 9:15 a.m.•6 views

CVE-2025-8909

Organization Portal System developed by WellChoose has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

7.1CVSS7.4AI score0.00061EPSS

CVE•added 2025/08/13 9:15 a.m.•6 views

CVE-2025-8910

6.1CVSS7.5AI score0.00047EPSS

CVE•added 2025/08/13 10:15 a.m.•6 views

CVE-2025-8914

Organization Portal System developed by WellChoose has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

7.5CVSS8.6AI score0.00042EPSS