Approved changes feed: RSS · Atom

cpe:2.3:a:feminer:warehouse_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFeminer (2f993d4a-f877-57bb-836c-e82123e2f28b)
ProductWarehouse Management System (94cd231b-c7dd-5cd5-a359-f294cf3a9cab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/feminer/wms purl2cpe 2026-06-01 10:12:37.355179

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1059 vulnerable 2026-06-08 07:47:14.273960 FeMiner wms chkuser.php sql injection
HIGH (7.3)
A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknown functionality of the file /src/chkuser.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-17T18:32:06.697Z
Updated: 2026-02-23T08:33:38.585Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.