Zhiyou ERP vulnerabilities
3 known vulnerabilities in Zhiyou ERP from Bjskzy. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Zhiyou ERP: Improper Restriction of XML External Entity Reference
A vulnerability was identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this vulnerability is the function openForm of the component com.artery.richclient.RichClientService. Such manipulation of the argument contentString leads to xml external entity refer
- 9.8 Critical severity
Zhiyou ERP: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the
- 9.8 Critical severity
Zhiyou ERP: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remot