megagao

Products

ProductCVEsExploitedLatest
production_ssm6–Feb 21, 2026
ssm-erp6–Feb 21, 2026

Exploited and recent CVEs

  • CVE-2026-2864 Medium 5.4 feng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete path traversal 0.4%
  • CVE-2026-2864 Medium 5.4 feng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete path traversal 0.4%
  • CVE-2026-2863 Medium 5.4 feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal 0.4%
  • CVE-2026-2863 Medium 5.4 feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal 0.4%
  • CVE-2026-2860 Medium 6.3 feng_ha_ha/megagao ssm-erp/production_ssm EmployeeController.java improper authorization 0.3%
  • CVE-2026-2860 Medium 6.3 feng_ha_ha/megagao ssm-erp/production_ssm EmployeeController.java improper authorization 0.3%
  • CVE-2025-4768 Medium 6.3 feng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload 0.3%
  • CVE-2025-4768 Medium 6.3 feng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload 0.3%
  • CVE-2025-4530 Medium 4.3 feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal 0.5%
  • CVE-2025-4530 Medium 4.3 feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal 0.5%
  • CVE-2025-4333 Medium 6.3 feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload 0.3%
  • CVE-2025-4333 Medium 6.3 feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload 0.3%