Shandong Hoteam Software vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Shandong Hoteam Software products: 1 record(s), with severity, exploitation and fixes.

PDM Product Data Management System 1

Exploited only (KEV) →

CVE-2026-7727 High · 7.3 CWE-74 May 4, 2026

Shandong Hoteam Software PDM Product Data Management System DataService GetQueryMachineGridOnePageData sql injection

A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /Base/BaseService.asmx/DataService. This manipulation of the argument SortOrder causes sql injection. The attack can be initiated remotely. Upgrading to version 8.3.10 is able to mitigate this issue. You should upgrade the affected component.