Xiongwei vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Xiongwei products: 1 record(s), with severity, exploitation and fixes.

Smart Catering Cloud Platform 1

Exploited only (KEV) →

CVE-2025-14780 Medium · 6.3 CWE-74 Dec 16, 2025

Xiongwei Smart Catering Cloud Platform dish_trade_detail_get sql injection

A vulnerability was detected in Xiongwei Smart Catering Cloud Platform 2.1.6446.28761. The affected element is an unknown function of the file /dishtrade/dish_trade_detail_get. The manipulation of the argument filter results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.