erzhongxmu

Products

ProductCVEsExploitedLatest
JEEWMS16–Oct 22, 2026

Exploited and recent CVEs

  • CVE-2021-48015 High 7.5 JeeWMS Path Traversal via showOrDownByurl.do 0.6%
  • CVE-2026-108782 Medium 6.3 erzhongxmu JEEWMS Autocomplete CommonServiceImpl.java CommonServiceImpl.getAutoList sql injection 0.2%
  • CVE-2026-108781 Medium 6.3 erzhongxmu JEEWMS PDA WmToMoveGoodsController.java WmToMoveGoodsController.list sql injection 0.2%
  • CVE-2026-108779 Medium 6.3 erzhongxmu JEEWMS WmSttInGoodsController.java WmSttInGoodsController.list sql injection 0.2%
  • CVE-2026-108778 Medium 6.3 erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmIController.list sql injection 0.2%
  • CVE-2026-108777 Medium 6.3 erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection 0.2%
  • CVE-2026-108775 Medium 6.3 erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.list sql injection 0.2%
  • CVE-2026-108774 Medium 6.3 erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection 0.2%
  • CVE-2026-108773 Medium 6.3 erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection 0.2%
  • CVE-2026-108684 Medium 6.3 erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData sql injection 0.3%
  • CVE-2026-11458 Medium 5.3 erzhongxmu JeeWMS Boot Actuator Endpoint actuator information disclosure 0.3%
  • CVE-2026-11457 High 7.3 erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection 0.3%
  • CVE-2026-3028 Medium 4.3 erzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting 0.4%
  • CVE-2026-3027 Medium 4.3 erzhongxmu JEEWMS UEditor getContent.jsp cross site scripting 0.3%
  • CVE-2026-3026 High 7.3 erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery 0.4%
  • CVE-2024-11251 Medium 6.3 erzhongxmu Jeewms AuthInterceptor cgReportController.do sql injection 0.5%