CNNVD-202509-1577 Information
Sep 11, 2025
cve
CNNVD ID
CNNVD-202509-1577
Related CVE
- CNNVD Published: 2025-09-11
Description (Chinese)
erjinzhi 10OA是中国二进制（erjinzhi）公司的一款企业自动化系统。 erjinzhi 10OA 1.0版本存在代码注入漏洞，该漏洞源于对文件/trial/mvc/finder中参数Name的错误操作，可能导致跨站脚本攻击。
Description (English)
erjinzhi 10OA is an enterprise automation system for the Chinese binary (erjinzhi) company. The erjinzhi 10OA 1.0 contains a code-injection loophole, which results from an error in the parameter name of the file/trial/mvc/finder, which may result in a cross-site script attack.
Hazard Level
High
Vulnerability Type
代码注入
Affected Vendor
二进制
Published
2025-09-11
Last Modified
2026-02-24
References
https://github.com/1276486/CVE/issues/5 https://vuldb.com/?submit.643032 https://vuldb.com/?ctiid.323641 https://vuldb.com/?id.323641 https://access.redhat.com/security/cve/cve-2025-10271
Share on: