Zframeworks

Zz

14 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2025-1848

Exploit
  • EPSS 0.09%
  • Published 03.03.2025 04:15:08
  • Last modified 26.05.2025 02:03:48

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the a...

8.8

CVE-2025-1849

Exploit
  • EPSS 0.09%
  • Published 03.03.2025 04:15:08
  • Last modified 26.05.2025 02:00:59

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulation of the argument url leads to server-side request forgery. The attac...

6.5

CVE-2025-1846

Exploit
  • EPSS 0.21%
  • Published 03.03.2025 03:15:08
  • Last modified 28.05.2025 17:15:32

A vulnerability was found in zj1983 zz up to 2024-8. It has been declared as problematic. This vulnerability affects the function deleteLocalFile of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.java of the component File Handler. The ...

8.8

CVE-2025-1847

Exploit
  • EPSS 0.09%
  • Published 03.03.2025 03:15:08
  • Last modified 26.05.2025 01:59:12

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to ...

8.8

CVE-2025-1833

Exploit
  • EPSS 0.09%
  • Published 02.03.2025 22:15:34
  • Last modified 26.05.2025 00:49:11

A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/main/java/com/futvan/z/erp/customer_notice/Customer_noticeAction.java of the component HTTP...

9.8

CVE-2025-1834

Exploit
  • EPSS 0.09%
  • Published 02.03.2025 22:15:34
  • Last modified 26.05.2025 00:46:28

A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remot...

8.8

CVE-2025-1832

Exploit
  • EPSS 0.06%
  • Published 02.03.2025 21:15:10
  • Last modified 26.05.2025 00:49:57

A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads...

9.8

CVE-2025-1831

Exploit
  • EPSS 0.06%
  • Published 02.03.2025 20:15:34
  • Last modified 26.05.2025 00:57:22

A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument user_id leads to sql injection. I...

4.8

CVE-2025-1830

Exploit
  • EPSS 0.05%
  • Published 02.03.2025 20:15:33
  • Last modified 26.05.2025 00:59:14

A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as problematic. This issue affects some unknown processing of the component Customer Information Handler. The manipulation of the argument Customer Name leads to cross site script...

9.8

CVE-2025-1821

Exploit
  • EPSS 0.06%
  • Published 02.03.2025 19:15:10
  • Last modified 26.05.2025 01:41:39

A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID lea...