Skip to content
OpenAdvisories

Vendor

Bjskzy

4 known vulnerabilities.

Products

Zhiyou ERP 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-1218

    Bjskzy Zhiyou ERP com.artery.richclient.RichClientService RichClientService.class initRCForm xml external entity reference

    A vulnerability was detected in Bjskzy Zhiyou ERP up to 11.0. Impacted is the function initRCForm of the file RichClientService.class of the component com.artery.richclient.RichClientService. Performing a manipulation results in xml external entity reference.…

    Bjskzy Zhiyou ERP
  • Medium 6.3
    CVE-2025-11139

    Bjskzy Zhiyou ERP com.artery.form.services.FormStudioUpdater uploadStudioFile path traversal

    A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the…

    Bjskzy Zhiyou ERP
  • Medium 6.3
    CVE-2025-9391

    Bjskzy Zhiyou ERP com.artery.workflow.ServiceImpl getFieldValue sql injection

    A weakness has been identified in Bjskzy Zhiyou ERP up to 11.0. Affected by this issue is the function getFieldValue of the component com.artery.workflow.ServiceImpl. This manipulation of the argument sql causes sql injection. The attack may be initiated remo…

    Bjskzy Zhiyou ERP