Advisories · Technology
erzhongxmu JeeWMS.
Every CVE that names erzhongxmu JeeWMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
JeeWMS Path Traversal via showOrDownByurl.do
- erzhongxmu JeeWMS
- Path traversal
- CVSS 5.3 Medium
erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection
- erzhongxmu JEEWMS
- Other injection
- SQL injection
- CVSS 5.3 Medium
erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection
- erzhongxmu Jeewms
- Other injection
- SQL injection
- CVSS 6.9 Medium
erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure
- erzhongxmu JeeWMS
- Information disclosure
- Broken access control
- CVSS 6.9 Medium
erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection
- erzhongxmu JeeWMS
- Other injection
- CWE-707
- CVSS 5.3 Medium
erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting
- erzhongxmu JEEWMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting
- erzhongxmu JEEWMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.9 Medium
erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery
- erzhongxmu JEEWMS
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection
- erzhongxmu Jeewms
- Other injection
- SQL injection