SQL Injection Vulnerability in erzhongxmu JEEWMS Product from erzhongxmu

CVE-2026-108773

What is CVE-2026-108773?

A SQL injection vulnerability has been identified in the erzhongxmu JEEWMS application, specifically affecting the 'docheck' function within the WmOmNoticeHController.java file. This weakness allows an attacker to manipulate the 'goodscode' argument, potentially facilitating unauthorized access to the database. The vulnerability can be exploited remotely, posing significant security risks to users and systems that rely on this software. Unfortunately, the vendor has not responded to disclosure attempts regarding this critical issue, allowing for public exploits to surface.

References