Skip to content
OpenAdvisories

Product · DigiWin

ERP

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2025-2706

    Digiwin ERP UploadAjaxAPI.ashx unrestricted upload

    A vulnerability classified as critical was found in Digiwin ERP 5.0.1. Affected by this vulnerability is an unknown functionality of the file /Api/TinyMce/UploadAjaxAPI.ashx. The manipulation of the argument File leads to unrestricted upload. The attack can b…

    DigiWin ERP