Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Jun-He Technology Ltd. Clear all filters
TI-2021-10713 CVE-2021-30173 · GHSA-m7c8-3qqc-3m6c

Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion

Priority LOW 31

Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01237 Published 2021-05-07 No fix listed CWE-36
TI-2021-10712 CVE-2021-30172 · GHSA-p3vw-pmcf-8h54

Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS

Priority LOW 25

Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS (Cr…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-05-07 No fix listed CWE-79
TI-2021-10711 CVE-2021-30171 · GHSA-9w75-p6x3-6qwp

Jun-He Technology Ltd. ERP POS - Stored XSS-2

Priority LOW 25

Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additio…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-05-07 No fix listed CWE-79
TI-2021-10710 CVE-2021-30170 · GHSA-2q53-9g7q-p5mg

Jun-He Technology Ltd. ERP POS - Stored XSS-1

Priority LOW 25

Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) atta…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-05-07 No fix listed CWE-79