CNNVD-202508-738 Information

CNNVD ID

CNNVD-202508-738

Related CVE

CVE-2025-8702

• CNNVD Published: 2025-08-08

Description (Chinese)

Wanzhou WOES Intelligent Optimization Energy Saving System（万洲WOES智能优化节能系统）是中国万洲（Wanzhou）公司的一款智能优化节能系统。 Wanzhou WOES Intelligent Optimization Energy Saving System 1.0版本存在注入漏洞，该漏洞源于对文件/CommonSolution/GetVariableByOneIDNew中参数ObjectID的错误操作导致SQL注入。

Description (English)

Wanzhou Woes Intelligent Optimization Energy Saving System (WAES) is an intelligent energy-efficient system of Wanzhou Corporation in China. Wanzhou Woes Intelligent Optimization Energy Saving Systems Version 1.0 had an injection loophole, which resulted from an error in the operation of the parameter " ObjectID " in the document/CommonSolution/GetVariableByOneIDNew.

Hazard Level

High

Vulnerability Type

注入

Affected Vendor

万洲

Published

2025-08-08

Last Modified

2026-02-24

References

https://github.com/si12/xxx/issues/2 https://vuldb.com/?ctiid.319131 https://vuldb.com/?id.319131 https://vuldb.com/?submit.621217 https://access.redhat.com/security/cve/cve-2025-8702