Skip to content
OpenAdvisories

Vendor

easysoft

6 known vulnerabilities.

Products

zentaopms 5 ZenTao PMS 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-125747

    ZenTao PMS through 22.7 contains a missing object-level authorization vulnerability in module/build/control.php that al…

    easysoft zentaopms
  • Medium 6.3
    CVE-2026-121514

    EasySoft ZenTao PMS User model.php checkGroupChange privileges management

    A weakness has been identified in EasySoft ZenTao PMS up to 22.6. This impacts the function userModel::checkGroupChange of the file module/user/model.php of the component User Module. This manipulation of the argument group causes improper privilege managemen…

    easysoft ZenTao PMS
  • Medium 6.5
    CVE-2026-119645

    ZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc

    ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated users to read documents without checkPrivDoc() access checks. Low-privilege attackers can enumerate sequential document ids to retrieve body …

    easysoft zentaopms
  • Medium 5.4
    CVE-2026-111346

    ZenTao PMS through 22.6 Authorization Bypass via action::editComment

    ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplying an arbitrary actionID. Attackers can iterate sequential action ids to modify…

    easysoft zentaopms
  • Medium 6.3
    CVE-2025-5114

    easysoft zentaopms Editor index.php edit deserialization

    A vulnerability has been found in easysoft zentaopms 21.5_20250307 and classified as critical. This vulnerability affects the function Edit of the file /index.php?m=editor&f=edit&filePath=cGhhcjovLy9ldGMvcGFzc3dk&action=edit of the component Committer. The ma…

    easysoft zentaopms