CVE-2026-1546 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depo…
Medium CVSS: 5.3

CVE-2026-1546

A security vulnerability has been detected in jishenghua jshERP up to 3.6. The impacted element is the function getBillItemByParam of the file /jshERP-boot/depotItem/importItemExcel of the component com.jsh.erp.datasource.mappers.DepotItemMapperEx. The manipulation of the argument barCodes leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vendor
Jishenghua
Product
Jsherp
CWE
CWE-74
Yayın Tarihi
2026-01-28 22:15:55
Güncelleme
2026-02-09 16:58:44
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-74 Jsherp MEDIUM Jishenghua 2026

Referanslar

https://github.com/jishenghua/jshERP/ https://github.com/jishenghua/jshERP/issues/145 https://github.com/jishenghua/jshERP/issues/145#issue-3816930151 https://vuldb.com/?ctiid.343230 https://vuldb.com/?id.343230 https://vuldb.com/?submit.739688 https://github.com/jishenghua/jshERP/issues/145 https://github.com/jishenghua/jshERP/issues/145#issue-3816930151