Approved changes feed: RSS · Atom

cpe:2.3:a:panhainan:ds-java:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPanhainan (3f7c4977-a903-5ff5-9f35-55924ae327e4)
ProductDs Java (8b021552-b28f-5995-840c-97bf3adf81ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gitee/panhainan/ds-java purl2cpe 2026-06-01 10:12:59.917942
pkg:github/panhainan/ds-java purl2cpe 2026-06-01 10:12:59.917945

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3843 vulnerable 2026-06-08 07:23:10.013913 panhainan DS-Java cross-site request forgery
MEDIUM (4.3)
A vulnerability was found in panhainan DS-Java 1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-21T22:00:07.244Z
Updated: 2025-04-22T02:17:52.488Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3842 vulnerable 2026-06-08 07:23:10.012547 panhainan DS-Java FileUpload.java uploadUserPic.action code injection
MEDIUM (6.3)
A vulnerability was found in panhainan DS-Java 1.0 and classified as critical. This issue affects the function uploadUserPic.action of the file src/com/phn/action/FileUpload.java. The manipulation of the argument fileUpload leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-21T20:31:04.375Z
Updated: 2025-04-22T02:22:52.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.