Huayi-tec vulnerabilities

Products

• Jeewms 19

Newest

• erzhongxmu jeewms erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting CVE-2026-3028 5.3 MediumFebruary 23, 2026
• huayi-tec jeewms JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through... CVE-2025-70311 6.5 MediumFebruary 3, 2026
• huayi-tec jeewms JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main... CVE-2025-60269 9.4 CriticalOctober 10, 2025
• huayi-tec jeewms An arbitrary file upload vulnerability exists in JeeWMS 20250820, which is caused by the lack of... CVE-2025-60268 6.5 MediumOctober 10, 2025
• huayi-tec jeewms A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to... CVE-2025-55834 6.1 MediumSeptember 16, 2025
• erzhongxmu jeewms JeeWMS File filedeal.do filedeal access control CVE-2025-5390 5.3 MediumMay 31, 2025
• erzhongxmu jeewms JeeWMS File generateController.do dogenerateOne2Many access control CVE-2025-5389 5.3 MediumMay 31, 2025
• erzhongxmu jeewms JeeWMS generateController.do dogenerate sql injection CVE-2025-5388 5.3 MediumMay 31, 2025
• erzhongxmu jeewms JeeWMS File generateController.do dogenerate access control CVE-2025-5387 5.3 MediumMay 31, 2025
• erzhongxmu jeewms JeeWMS cgformTransController.do transEditor sql injection CVE-2025-5386 5.3 MediumMay 31, 2025
• erzhongxmu jeewms JeeWMS cgformTemplateController.do doAdd path traversal CVE-2025-5385 5.3 MediumMay 31, 2025
• erzhongxmu jeewms JeeWMS cgAutoListController.do CgAutoListController sql injection CVE-2025-5384 5.3 MediumMay 31, 2025
• huayi-tec jeewms An arbitrary file upload vulnerability in the parserXML() method of JeeWMS before v2025.01.01... CVE-2024-57761 8.1 HighJanuary 14, 2025
• erzhongxmu jeewms Guangzhou Huayi Intelligent Technology Jeewms graphReportController.do datagridGraph sql injection CVE-2025-0392 5.3 MediumJanuary 11, 2025
• erzhongxmu jeewms Guangzhou Huayi Intelligent Technology Jeewms CgFormBuildController. java saveOrUpdate sql injection CVE-2025-0391 5.3 MediumJanuary 11, 2025
• erzhongxmu jeewms Guangzhou Huayi Intelligent Technology Jeewms wmOmNoticeHController.do path traversal CVE-2025-0390 6.9 MediumJanuary 11, 2025
• erzhongxmu jeewms Guangzhou Huayi Intelligent Technology Jeewms Druid Monitoring Interface index.html improper authorization CVE-2024-12347 6.9 MediumDecember 8, 2024
• erzhongxmu jeewms Guangzhou Huayi Intelligent Technology Jeewms WmOmNoticeHController.java preHandle information disclosure CVE-2024-11961 6.9 MediumNovember 28, 2024
• erzhongxmu jeewms erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection CVE-2024-11251 5.3 MediumNovember 15, 2024