Approved changes feed: RSS · Atom

cpe:2.3:a:skycaiji:skycaiji:2.9:*:*:*:*:*:*:*

part: a version: 2.9 update: *

VendorSkycaiji (9ea2e0d8-ea7d-5663-a538-fcac1b04c83a)
ProductSkycaiji (eed2f0b5-3304-57d2-8cde-565891a63e0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/zorlan/skycaiji purl2cpe 2026-06-01 10:18:22.591134

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1799 vulnerable 2026-06-08 07:08:38.179995 Zorlan SkyCaiji Tool.php previewAction server-side request forgery
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument data leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-01T17:31:04.651Z
Updated: 2025-03-03T20:35:03.718Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1791 vulnerable 2026-06-08 07:08:38.170409 Zorlan SkyCaiji Tool.php fileAction unrestricted upload
MEDIUM (6.3)
A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument save_data leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-01T13:31:04.040Z
Updated: 2025-03-03T20:36:54.749Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.