Approved changes feed: RSS · Atom

cpe:2.3:a:shandong_hoteam:pdm_product_data_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorShandong Hoteam (c15f182b-484c-5c7c-ab8f-411e800b1edc)
ProductPdm Product Data Management System (d0c24db6-2d4f-592f-809a-d88604be0934)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18854 vulnerable 2026-09-16 04:34:01.910330 Shandong Hoteam PDM Product Data Management System DataService GetStoredClassByFilter sql injection
HIGH (7.3)
A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10. The impacted element is the function GetStoredClassByFilter of the file /Base/BaseService.asmx/DataService. The manipulation of the argument FilterString leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-08-05T00:00:40.563Z
Updated: 2026-08-05T14:55:22.301Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.