GCVE - cpe:2.3:a:10oa:10oa:1.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:10oa:10oa:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

Vendor	10Oa (`1b24e16d-f278-5075-a83f-bab6e35e2329`)
Product	10Oa (`4fc7e4a7-0ce9-5e14-a547-d7171a3b7495`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-10274`	vulnerable	2026-06-08 07:02:26.628112	erjinzhi 10OA item cross site scripting MEDIUM (4.3) A security flaw has been discovered in erjinzhi 10OA 1.0. Affected by this issue is some unknown functionality of the file /trial/mvc/item. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-12T00:02:06.430Z Updated: 2025-09-12T14:36:37.223Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323644 https://vuldb.com/?ctiid.323644 https://vuldb.com/?submit.643050 https://github.com/1276486/CVE/issues/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10273`	vulnerable	2026-06-08 07:02:26.627444	erjinzhi 10OA file.aspx path traversal LOW (3.5) A vulnerability was identified in erjinzhi 10OA 1.0. Affected by this vulnerability is an unknown functionality of the file /view/file.aspx. Such manipulation of the argument File leads to path traversal. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-11T23:32:05.541Z Updated: 2025-09-12T14:37:17.337Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323643 https://vuldb.com/?ctiid.323643 https://vuldb.com/?submit.643036 https://github.com/1276486/CVE/issues/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10272`	vulnerable	2026-06-08 07:02:26.627058	erjinzhi 10OA catalogue cross site scripting MEDIUM (4.3) A vulnerability was determined in erjinzhi 10OA 1.0. Affected is an unknown function of the file /trial/mvc/catalogue. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-11T23:02:06.469Z Updated: 2025-09-12T13:17:53.672Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323642 https://vuldb.com/?ctiid.323642 https://vuldb.com/?submit.643033 https://github.com/1276486/CVE/issues/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10271`	vulnerable	2026-06-08 07:02:26.626481	erjinzhi 10OA finder cross site scripting MEDIUM (4.3) A vulnerability was found in erjinzhi 10OA 1.0. This impacts an unknown function of the file /trial/mvc/finder. The manipulation of the argument Name results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-11T21:32:06.170Z Updated: 2025-09-12T13:14:07.721Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323641 https://vuldb.com/?ctiid.323641 https://vuldb.com/?submit.643032 https://github.com/1276486/CVE/issues/5	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.