CNNVD-202508-737 Information

CNNVD ID

CNNVD-202508-737

Related CVE

CVE-2025-8705

• CNNVD Published: 2025-08-08

Description (Chinese)

Wanzhou WOES Intelligent Optimization Energy Saving System（万洲WOES智能优化节能系统）是中国万洲（Wanzhou）公司的一款智能优化节能系统。 Wanzhou WOES Intelligent Optimization Energy Saving System 1.0版本存在注入漏洞，该漏洞源于对文件/WEAS_HomePage/GetTargetConfig中参数BP_ProID的错误操作导致SQL注入。

Description (English)

Wanzhou Woes Intelligent Optimization Energy Saving System (WAES) is an intelligent energy-efficient system of Wanzhou Corporation in China. Wanzhou Woes Intelligent Optimization Energy Saving System 1.0 has an injection loophole, which results from an error in the application of the parameter BP ProID in the document/WEAS HomePage/GetTargetConfig.

Hazard Level

High

Vulnerability Type

注入

Affected Vendor

万洲

Published

2025-08-08

Last Modified

2026-02-24

References

https://vuldb.com/?submit.621280 https://vuldb.com/?id.319134 https://vuldb.com/?ctiid.319134 https://github.com/si12/xxx/issues/5 https://access.redhat.com/security/cve/cve-2025-8705 https://nvd.nist.gov/vuln/detail/CVE-2025-8705