Deer Wms 2
Approved changes feed: RSS · Atom
cpe:2.3:a:deerwms:deer-wms-2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Deerwms (bc40f282-24bd-58b2-9837-4cb9055f4cbd) |
|---|---|
| Product | Deer Wms 2 (c8fe68c1-0bf2-5ff7-943f-a201b58c5f33) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:gitee/deerwms/deer-wms-2 |
purl2cpe | 2026-06-01 10:18:18.759938 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8163 |
vulnerable | 2026-06-08 07:45:19.730575 |
deerwms deer-wms-2 list sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument params[dataScope] leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T17:32:09.793Z
Updated: 2025-07-25T17:56:43.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8162 |
vulnerable | 2026-06-08 07:45:19.730210 |
deerwms deer-wms-2 list sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3. Affected by this issue is some unknown functionality of the file /system/dept/list. The manipulation of the argument params[dataScope] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T17:02:11.195Z
Updated: 2025-07-25T17:38:46.517Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8161 |
vulnerable | 2026-06-08 07:45:19.729764 |
deerwms deer-wms-2 export sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. Affected by this vulnerability is an unknown functionality of the file /system/role/export. The manipulation of the argument params[dataScope] leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T16:32:12.969Z
Updated: 2025-07-25T17:39:38.091Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8127 |
vulnerable | 2026-06-08 07:45:19.657005 |
deerwms deer-wms-2 list sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in deerwms deer-wms-2 up to 3.3. This vulnerability affects unknown code of the file /system/user/list. The manipulation of the argument params[dataScope] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T03:02:11.856Z
Updated: 2025-07-25T16:47:17.399Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8126 |
vulnerable | 2026-06-08 07:45:19.656658 |
deerwms deer-wms-2 export sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/user/export. The manipulation of the argument params[dataScope] leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T01:32:09.707Z
Updated: 2025-07-25T12:02:53.450Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8125 |
vulnerable | 2026-06-08 07:45:19.656295 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8124 |
vulnerable | 2026-06-08 07:45:19.655790 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8123 |
vulnerable | 2026-06-08 07:45:19.655202 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.