SQL Injection Vulnerability in zzskzy Warehouse Refinement Management System
CVE-2025-2217

5.3MEDIUM

Key Information:

Vendor: Zzskzy
Status: Warehouse Refinement Management System
Vendor: CVE Published:; 12 March 2025

Badges

👾 Exploit Exists

What is CVE-2025-2217?

A vulnerability in the zzskzy Warehouse Refinement Management System version 1.3 has been identified, specifically within the ProcessRequest function of the /getAdyData.ashx file. This issue allows attackers to conduct SQL injection attacks by manipulating the 'showid' argument, potentially leading to unauthorized data access. The vulnerability can be exploited remotely, raising significant risks for users. Although the issue has been disclosed publicly, the vendor has not responded to early notifications regarding this security flaw.

Affected Version(s)

Warehouse Refinement Management System 1.3

References

https://vuldb.com/?id.299289

vdb-entrytechnical-description

https://vuldb.com/?ctiid.299289

signaturepermissions-required

https://vuldb.com/?submit.512333

third-party-advisory

CVSS V4

Score:

5.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction: