Vulnerabilidades de Fuyang Lipengjun
CVEs publicadas que afetam produtos de Fuyang Lipengjun: 7 registro(s), com severidade, exploração e correções.
CVE-2025-57213
Alta · 7.5
CWE-284 04/12/2025
Improper Access Control em Fuyang Lipengjun Platform
Incorrect access control in the component orderService.queryObject of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
CVE-2025-57212
Alta · 7.5
CWE-284 04/12/2025
Improper Access Control em Fuyang Lipengjun Platform
Incorrect access control in the component ApiOrderService.java of platform v1.0.0 allows attackers to access sensitive information via a crafted request.
CVE-2025-57210
Alta · 7.5
CWE-284 04/12/2025
Improper Access Control em Fuyang Lipengjun Platform
Incorrect access control in the component ApiPayController.java of platform v1.0.0 allows attackers to access sensitive information via unspecified vectors.
CVE-2025-10822
Média · 4.3
CWE-266 22/09/2025
fuyang_lipengjun platform queryAll SysSmsLogController improper authorization
A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
CVE-2025-10821
Média · 4.3
CWE-266 22/09/2025
fuyang_lipengjun platform queryAll TopicCategoryController improper authorization
A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used.
CVE-2025-10820
Média · 4.3
CWE-266 22/09/2025
fuyang_lipengjun platform queryAll TopicController improper authorization
A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used.
CVE-2025-10819
Média · 4.3
CWE-266 22/09/2025
fuyang_lipengjun platform queryAll UserCouponController improper authorization
A security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponController of the file /usercoupon/queryAll. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.