Advisories · Technology

Shenzhen Sixun Software Sixun Shanghui Group Business Management System.

Every CVE that names Shenzhen Sixun Software Sixun Shanghui Group Business Management System among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9544 CVE record

CVSS 6.9 Medium

Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection
- Shenzhen Sixun Software Sixun Shanghui Group Business Management System
- Other injection
- SQL injection
Not analysed yet 26 May 2026
CVE-2025-14697 CVE record

CVSS 6.3 Medium

Shenzhen Sixun Software Sixun Shanghui Group Business Management System ExportFiles file access
- Shenzhen Sixun Software Sixun Shanghui Group Business Management System
- Broken access control
- Information disclosure
Not analysed yet 15 Dec 2025
CVE-2025-14696 CVE record

CVSS 6.9 Medium

Shenzhen Sixun Software Sixun Shanghui Group Business Management System UpdatePasswordBatch password recovery
- Shenzhen Sixun Software Sixun Shanghui Group Business Management System
- CWE-640
Not analysed yet 15 Dec 2025
CVE-2025-4281 CVE record

CVSS 5.3 Medium

Shenzhen Sixun Software Sixun Shanghui Group Business Management System LoadData information disclosure
- Shenzhen Sixun Software Sixun Shanghui Group Business Management System
- Information disclosure
- Broken access control
Not analysed yet 5 May 2025
CVE-2025-2114 CVE record

CVSS 6.3 Medium

Shenzhen Sixun Software Sixun Shanghui Group Business Management System Reset Password Interface OperatorStop.asp improper authorization
- Shenzhen Sixun Software Sixun Shanghui Group Business Management System
- Privilege escalation
- Broken access control
Not analysed yet 9 Mar 2025