Skip to content
OpenAdvisories

Vendor

Jun-He Technology

4 known vulnerabilities.

Products

Quan-Fang-Wei-Tong-Xun system 2 ERP POS 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2021-30173

    Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File Inclusion

    Local File Inclusion vulnerability of the omni-directional communication system allows remote authenticated attacker inject absolute path into Url parameter and access arbitrary file.

    Jun-He Technology Quan-Fang-Wei-Tong-Xun system
  • Medium 4.6
    CVE-2021-30172

    Jun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Reflected XSS

    Special characters of picture preview page in the Quan-Fang-Wei-Tong-Xun system are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out Reflected XSS (Cross-site scripting) attacks, additional…

    Jun-He Technology Quan-Fang-Wei-Tong-Xun system
  • Medium 4.6
    CVE-2021-30171

    Jun-He Technology Ltd. ERP POS - Stored XSS-2

    Special characters of ERP POS news page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s …

    Jun-He Technology ERP POS
  • Medium 4.6
    CVE-2021-30170

    Jun-He Technology Ltd. ERP POS - Stored XSS-1

    Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate…

    Jun-He Technology ERP POS