Fuyang Lipengjun Platform vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Fuyang Lipengjun Platform: 7 record(s), with affected versions and fixes.cpe:2.3:a:fuyang_lipengjun:platform
CVE-2025-57213
High · 7.5
CWE-284 Dec 4, 2025
Improper Access Control in Fuyang Lipengjun Platform
Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
CVE-2025-57212
High · 7.5
CWE-284 Dec 4, 2025
Improper Access Control in Fuyang Lipengjun Platform
Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
CVE-2025-57210
High · 7.5
CWE-284 Dec 4, 2025
Improper Access Control in Fuyang Lipengjun Platform
Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors.
CVE-2025-10822
Medium · 4.3
CWE-266 Sep 22, 2025
fuyang_lipengjun platform queryAll SysSmsLogController improper authorization
A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVE-2025-10821
Medium · 4.3
CWE-266 Sep 22, 2025
fuyang_lipengjun platform queryAll TopicCategoryController improper authorization
A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVE-2025-10820
Medium · 4.3
CWE-266 Sep 22, 2025
fuyang_lipengjun platform queryAll TopicController improper authorization
A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.
CVE-2025-10819
Medium · 4.3
CWE-266 Sep 22, 2025
fuyang_lipengjun platform queryAll UserCouponController improper authorization
A security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponController of the file /usercoupon/queryAll. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.