Bjskzy vulnerabilities
We track 3 vulnerabilities in Bjskzy products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2025.
Latest Bjskzy vulnerabilities
- 9.8 Critical severity
Zhiyou ERP: Improper Restriction of XML External Entity Reference
A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this vulnerability is the function openForm of the component com.artery.richclient.RichClientService. Such manipulation of the argument contentString leads to xml external entity refer
- 9.8 Critical severity
Zhiyou ERP: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the
- 9.8 Critical severity
Zhiyou ERP: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remot