Approved changes feed: RSS · Atom

cpe:2.3:a:huija:bicyclesharingserver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHuija (7040b297-7746-5885-8480-6d0e9ade9b64)
ProductBicyclesharingserver (ea3e44d6-8f35-5cbd-a443-bc0fea785e51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6753 vulnerable 2026-06-08 07:43:16.190488 huija bicycleSharingServer AdminController.java selectAdminByNameLike sql injection
MEDIUM (6.3)
A vulnerability was found in huija bicycleSharingServer 1.0 and classified as critical. This issue affects the function selectAdminByNameLike of the file AdminController.java. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-27T04:00:16.948Z
Updated: 2025-06-27T14:17:48.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6749 vulnerable 2026-06-08 07:43:16.182525 huija bicycleSharingServer AdminController.java searchAdminMessageShow sql injection
MEDIUM (6.3)
A vulnerability classified as critical was found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this vulnerability is the function searchAdminMessageShow of the file AdminController.java. The manipulation of the argument Title leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
Published: 2025-06-27T02:00:11.675Z
Updated: 2025-06-27T11:20:29.850Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6738 vulnerable 2026-06-08 07:43:16.166630 huija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in huija bicycleSharingServer up to 7b8a3ba48ad618604abd4797d2e7cf3b5ac7625a. Affected by this issue is the function userDao.selectUserByUserNameLike of the file UserServiceImpl.java. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
Published: 2025-06-27T00:00:17.281Z
Updated: 2025-06-27T13:47:31.583Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.