These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgframework/core/common/service/impl/CommonServiceImpl.java of the component Autocomplete Handler. Executing a manipulation of the argument trem/searchField/entityName can lead to sql injection. It is possible to launch the attack r [truncated]
A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. The vulnerability affects the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. The vulnerability is due to sql injection caused by manipulation of the argument searchstr. The attack can be initiated remotely.
A SQL injection vulnerability was found in erzhongxmu JEEWMS version 2026.09.27-W39. The vulnerability exists in the WmInQmIController.list function of the Inbound Quality Check Pda Interface. This issue allows remote attackers to inject SQL code by manipulating the searchstr argument. The exploit has been publicly disclosed, and although the vendor was notified, no response was received.
A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely. The vulnerability has been made public and could be used. The vendor was contacted early about this disclosure bu [truncated]
A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39 in the Search Endpoint, specifically in the WvNoticeController.list function of the WvNoticeController.java file. The manipulation of the searchstr argument leads to SQL injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
A SQL injection vulnerability exists in erzhongxmu JEEWMS version 2026.09.27-W39. The vulnerability is located in the `MdBinController.java` file, specifically in the `getbinallagv` function. An attacker can exploit this vulnerability by manipulating the `binstore`, `binid`, `des`, or `cengshu` arguments, allowing for remote SQL injection attacks. Defenders should assess exposure and prioritize verificati [truncated]
A SQL injection vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39, specifically in the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.java. The vulnerability is triggered by manipulating the argument goodscode. The attack may be initiated remotely and the exploit is now public. This vulnerability has significant implications for the security of [truncated]
A SQL injection vulnerability was detected in erzhongxmu Jeewms up to 3.7, affecting the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeewmsFormDemoController.java of the component Autocomplete Data Handler. The attack can be initiated remotely. This vulnerability requires defenders to assess exposure and apply the patch to prevent SQL injection attacks. The CVE record and sour [truncated]
A weakness has been identified in erzhongxmu JeeWMS up to 141740afb2ba14d441c82a833d0a418d07ca2d69. This issue affects some unknown processing of the file /base-boot/actuator of the component Boot Actuator Endpoint. Executing a manipulation can lead to information disclosure. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. This product [truncated]
