GCVE - cpe:2.3:a:tsinghua_unigroup:electronic_archives

Approved changes feed: RSS · Atom

cpe:2.3:a:tsinghua_unigroup:electronic_archives_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tsinghua Unigroup (`43e9bd89-b452-5e34-bde7-4be6868d74f4`)
Product	Electronic Archives System (`905af7c2-32c4-5bae-9a24-42bcae7321db`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-3719`	vulnerable	2026-06-08 08:01:19.245870	Tsinghua Unigroup Electronic Archives System downLoad path traversal MEDIUM (5.3) A vulnerability was identified in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). This issue affects some unknown processing of the file /System/Cms/downLoad. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-08T07:02:11.069Z Updated: 2026-03-11T13:53:35.068Z Open on db.gcve.eu Reference links https://vuldb.com/?id.349662 https://vuldb.com/?ctiid.349662 https://vuldb.com/?submit.765787 https://github.com/luoye197-prog/cve-ziguang-filereadnew	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2684`	vulnerable	2026-06-08 07:55:17.378863	Tsinghua Unigroup Electronic Archives System uploadFile.html unrestricted upload HIGH (7.3) A vulnerability was determined in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). The impacted element is an unknown function of the file /Archive/ErecordManage/uploadFile.html. Executing a manipulation of the argument File can lead to unrestricted upload. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-18T23:32:07.382Z Updated: 2026-02-23T10:26:20.544Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346475 https://vuldb.com/?ctiid.346475 https://vuldb.com/?submit.753973 https://github.com/luoye197-prog/ziguang-fileupload https://github.com/luoye197-prog/ziguang-fileupload/blob/main/introduce%26poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2683`	vulnerable	2026-06-08 07:55:17.378401	Tsinghua Unigroup Electronic Archives System downLoad.html path traversal MEDIUM (4.3) A vulnerability was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). The affected element is an unknown function of the file /Using/Subject/downLoad.html. Performing a manipulation of the argument path results in path traversal. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-18T23:02:06.726Z Updated: 2026-02-23T10:26:06.323Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346474 https://vuldb.com/?ctiid.346474 https://vuldb.com/?submit.753418 https://github.com/luoye197-prog/cve-ziguang-fileread3/blob/main/introduce https://github.com/luoye197-prog/cve-ziguang-fileread3/blob/main/poc.py	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2682`	vulnerable	2026-06-08 07:55:17.378008	Tsinghua Unigroup Electronic Archives System prinReport.html sql injection MEDIUM (6.3) A vulnerability has been found in Tsinghua Unigroup Electronic Archives System up to 3.2.210802(62532). Impacted is an unknown function of the file /mine/PublicReport/prinReport.html?token=java. Such manipulation of the argument comid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-18T22:32:08.536Z Updated: 2026-02-23T10:25:54.393Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346473 https://vuldb.com/?ctiid.346473 https://vuldb.com/?submit.753308 https://github.com/luoye197-prog/cve-ziguang-sql/blob/main/introduce https://github.com/luoye197-prog/cve-ziguang-sql/blob/main/poc.py	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2672`	vulnerable	2026-06-08 07:55:17.369767	Tsinghua Unigroup Electronic Archives System downLoad download path traversal MEDIUM (4.3) A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is the function Download of the file /Search/Subject/downLoad. Performing a manipulation of the argument path results in path traversal. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-18T21:32:07.412Z Updated: 2026-02-23T10:25:29.097Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346468 https://vuldb.com/?ctiid.346468 https://vuldb.com/?submit.753295 https://vuldb.com/?submit.753383 https://github.com/luoye197-prog/cve-ziguang-fileread/blob/main/introduce	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0227`	vulnerable	2026-06-08 07:02:23.974005	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0226`	vulnerable	2026-06-08 07:02:23.973479	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-0225`	vulnerable	2026-06-08 07:02:23.972966	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Electronic Archives System

Notes

PURL mappings

Vulnerability references

Contribute