CVE Intelligence

Uniong vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Uniong products: 4 record(s), with severity, exploitation and fixes.

Webitr 4

Exploited only (KEV) →

CVE-2025-13771 Medium · 6.5 CWE-23 Nov 28, 2025
Uniong｜WebITR - Arbitrary File Read
WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
CVE-2025-13770 Medium · 6.5 CWE-89 Nov 28, 2025
Uniong｜WebITR - SQL Injection
WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2025-13769 Medium · 6.5 CWE-89 Nov 28, 2025
Uniong｜WebITR - SQL Injection
WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.
CVE-2025-13768 High · 8.8 CWE-639 Nov 28, 2025
Uniong｜WebITR - Authorization Bypass
WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.