CNNVD-202508-739 Information

CNNVD ID

CNNVD-202508-739

Related CVE

CVE-2025-8704

• CNNVD Published: 2025-08-08

Description (Chinese)

Wanzhou WOES Intelligent Optimization Energy Saving System（万洲WOES智能优化节能系统）是中国万洲（Wanzhou）公司的一款智能优化节能系统。 Wanzhou WOES Intelligent Optimization Energy Saving System 1.0版本存在注入漏洞，该漏洞源于对文件/WEAS_AlarmResult/GetAlarmResultProcessList中参数resultId的错误操作导致SQL注入。

Description (English)

Wanzhou Woes Intelligent Optimization Energy Saving System (WAES) is an intelligent energy-efficient system of Wanzhou Corporation in China. There is an injection loophole in the Wanzhou Woes Intelligent Optimization Energy Saving System Version 1.0, which is the result of a mishandling of the parameter resultId in document /WEAS AlarmResult/GetAlarmResultProcessList.

Hazard Level

High

Vulnerability Type

注入

Affected Vendor

万洲

Published

2025-08-08

Last Modified

2026-02-24

References

https://vuldb.com/?submit.621279 https://vuldb.com/?id.319133 https://vuldb.com/?ctiid.319133 https://github.com/si12/xxx/issues/4 https://access.redhat.com/security/cve/cve-2025-8704 https://nvd.nist.gov/vuln/detail/CVE-2025-8704