medium6.5
CVE-2025-70311
JEEWMS 1.0 is vulnerable to SQL Injection.
Impact
JEEWMS 1.0 is vulnerable to SQL Injection. Attackers can inject malicious SQL statements through the id1 and id2 parameters in the /systemControl.do interface for attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huayi-Tec | Jeewms | All versions |