Approved changes feed: RSS · Atom

cpe:2.3:a:fuyang_lipengjun:platform:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

VendorFuyang Lipengjun (a30e99a8-fa33-5657-8c48-5acf10bc06c7)
ProductPlatform (b31ef103-0088-5af4-944c-429c56e348c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9936 vulnerable 2026-06-08 07:47:10.308418 fuyang_lipengjun platform queryAll AdController improper authorization
MEDIUM (4.3)
A vulnerability was identified in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.
Published: 2025-09-03T23:02:13.499Z
Updated: 2025-09-04T14:24:18.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7936 vulnerable 2026-06-08 07:45:18.535180 fuyang_lipengjun platform ScheduleJobLogController.java queryPage sql injection
MEDIUM (6.3)
A vulnerability has been found in fuyang_lipengjun platform up to ca9aceff6902feb7b0b6bf510842aea88430796a and classified as critical. Affected by this vulnerability is the function queryPage of the file com/platform/controller/ScheduleJobLogController.java. The manipulation of the argument beanName/methodName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
Published: 2025-07-21T19:32:10.267Z
Updated: 2025-07-21T20:00:04.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57213 vulnerable 2026-06-08 07:33:15.827133 Details available
Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
Published: 2025-12-04T00:00:00.000Z
Updated: 2025-12-05T21:57:04.861Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57212 vulnerable 2026-06-08 07:33:15.826705 Details available
Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
Published: 2025-12-04T00:00:00.000Z
Updated: 2025-12-05T21:56:05.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57210 vulnerable 2026-06-08 07:33:15.826361 Details available
Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors.
Published: 2025-12-04T00:00:00.000Z
Updated: 2025-12-05T21:54:40.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10822 vulnerable 2026-06-08 07:02:27.560121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10821 vulnerable 2026-06-08 07:02:27.559663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10820 vulnerable 2026-06-08 07:02:27.559303 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10819 vulnerable 2026-06-08 07:02:27.558721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10676 vulnerable 2026-06-08 07:02:27.303304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10675 vulnerable 2026-06-08 07:02:27.302665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10674 vulnerable 2026-06-08 07:02:27.302037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10086 vulnerable 2026-06-08 07:02:26.273338 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.