Warehouse Management System vulnerabilities

2 known vulnerabilities in Warehouse Management System from Yeqifu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Warehouse Management System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-65879Dec 5, 2025Yeqifu

  Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled goodsimg parameter, which is directly concatenated with the server's UPLOAD_PATH and passed to File.delet

• 7.5 High severity

  Warehouse Management System: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-65878Dec 5, 2025Yeqifu

  The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controlled path parameters. An attacker could exploit directory traversal to read arbitrary files on the serv