sfturing

Products

ProductCVEsExploitedLatest
hosp_order14–Sep 23, 2026
ssm_pro1–Sep 7, 2026

Exploited and recent CVEs

  • CVE-2026-96552 Low 3.1 sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt 0.2%
  • CVE-2026-96551 Medium 4.3 sfturing hosp_order CommonUserController.java cross-site request forgery 0.2%
  • CVE-2026-96550 Low 3.7 sfturing hosp_order MailUtil.java getProperties cleartext transmission 0.3%
  • CVE-2026-96549 Low 3.3 sfturing hosp_order CommonUserServiceImpl.java cleartext storage 0.1%
  • CVE-2026-96548 Medium 5.6 sfturing hosp_order jdbc.properties hard-coded credentials 0.4%
  • CVE-2026-95396 Medium 4.3 sfturing hosp_order Public Search Handlers HospitalController.java cross site scripting 0.5%
  • CVE-2026-86264 Medium 4.3 sfturing ssm_pro Order Endpoint OrderController.java cross site scripting 0.4%
  • CVE-2026-86263 High 7.3 sfturing hosp_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization 0.6%
  • CVE-2026-86262 High 7.3 sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization 0.6%
  • CVE-2026-86261 High 7.3 sfturing hosp_order Order Controller OrderController.java authorization 0.6%
  • CVE-2026-86260 Medium 6.5 sfturing hosp_order Password Recovery CommonUserController.java modifyPassWord unverified password change 0.6%
  • CVE-2025-15450 Medium 6.3 sfturing hosp_order orderHos findOrderHosNum sql injection 0.3%
  • CVE-2025-6768 Medium 6.3 sfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection 0.3%
  • CVE-2025-6767 Medium 6.3 sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection 0.3%
  • CVE-2025-6766 Medium 6.3 sfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection 0.4%