| शीर्षक | Guangzhou Huayi Intelligent Technology Co., Ltd. JEEWMS 3.7 Information Leakage |
|---|
| विवरण | Guangzhou Huayi Intelligent Technology Co., Ltd.'s main business scope includes technology promotion and application services, software development, digital content services, information technology consulting, animation and comics design, data processing and storage, information system integration, and wholesale and retail of computer and communication equipment. Its intelligent warehouse management system JEEWMS has an information leakage vulnerability in the wmOmNoticeHController.do path. Attackers can download relevant shipping information by accessing wmOmNoticeHController.do?exportXls, which leaks important information such as the shipper's address, name, and contact information. |
|---|
| स्रोत | ⚠️ https://github.com/dycccccccc/JEEWMS/blob/main/JEEWMS%20Shipper%20Information%20Leakage.docx |
|---|
| उपयोगकर्ता | dycc (UID 77775) |
|---|
| सबमिशन | 16/11/2024 08:10 AM (2 साल पहले) |
|---|
| संयम | 28/11/2024 10:04 AM (12 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 286343 [Guangzhou Huayi Intelligent Technology Jeewms 3.7 WmOmNoticeHController.java preHandle request सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|