Electronic Archives System vulnerabilities

2 known vulnerabilities in Electronic Archives System from Tsinghua Unigroup. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Electronic Archives System: Unrestricted Upload of File with Dangerous Type

  CVE-2026-2684Feb 19, 2026Tsinghua Unigroup

  A vulnerability was determined in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). The impacted element is an unknown function of the file /Archive/ErecordManage/uploadFile.html. Executing a manipulation of the argument File can lead to un

• 9.8 Critical severity

  Electronic Archives System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-2682Feb 18, 2026Tsinghua Unigroup

  A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. T