Seeyon Zhiyuan OA Web Application System up to 20251222 carUseDetailList.j%73p CAR_BRAND_NO sql injection 🚫 [False Positive]

Noticeinfo

⚠️ This issue is likely a false positive. Please verify the cited sources and consider not including this entry. The vendor mentioned in the original disclosure filed a report that this issue affects a different vendor. The researcher was not able to provide a proof for his disputed claim which is why the CNA decided to revoke the whole entry.

Productinfo

Vendor

• Seeyon

Name

• Zhiyuan OA Web Application System

Version

• 20251222

Timelineinfo

01/01/2026 Advisory disclosed
01/01/2026 +0 days VulDB entry created
02/02/2026 +32 days VulDB entry last update

Sourcesinfo

Advisory: github.com
False Positive: Yes
Disputed: 🔍

CVE: CVE-2025-15427 (🔒)
GCVE (CVE): GCVE-0-2025-15427
GCVE (VulDB): GCVE-100-339349
scip Labs: https://www.scip.ch/en/?labs.20161013

Entryinfo

Created: 01/01/2026 12:24
Updated: 02/02/2026 07:58
Changes: 01/01/2026 12:24 (56), 01/02/2026 05:27 (30), 01/21/2026 04:21 (11), 01/29/2026 10:27 (3), 01/29/2026 11:58 (1), 02/02/2026 07:58 (2)
Complete: 🔍
Cache ID: 216:A5E:103

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion

Want to know what is going to be exploited?

We predict KEV entries!