Skip to content
OpenAdvisories

Product · dromara

skyeye

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-110609

    Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter

    Dromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authenticated low-privileged users to inject SQL via the keyword parameter in the queryErpOrderItem MyBatis statement using raw ${} substitution. Attackers can send…

    dromara skyeye