All 6 CVE vulnerabilities found in OFCMS, with AI-generated Chinese analysis, references, and POCs.
Vendor: n/a
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-10204 | OFCMS JSON Query SysUserController.java query sql injection CWE-89 | 6.3 | Medium | 2026-05-31 |
| CVE-2026-10203 | OFCMS JSON Query SystemParamController.java query sql injection CWE-89 | 6.3 | Medium | 2026-05-31 |
| CVE-2026-10202 | OFCMS JSON Query SystemDictController.java query sql injection CWE-89 | 6.3 | Medium | 2026-05-31 |
| CVE-2026-10193 | OFCMS ComnController ComnController.java query sql injection CWE-89 | 6.3 | Medium | 2026-05-31 |
| CVE-2025-1557 | OFCMS cross-site request forgery CWE-352 | 4.3 | Medium | 2025-02-22 |
| CVE-2024-9411 | OFCMS add.json add cross site scripting CWE-79 | 3.5 | Low | 2024-10-01 |
All 6 known CVE vulnerabilities affecting OFCMS with full Chinese analysis, references, and POCs where available.