Skip to content
OpenAdvisories

Vendor

megagao

6 known vulnerabilities.

Products

ssm-erp 6 production_ssm 6
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-2864

    feng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete path traversal

    A vulnerability has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. This affects the function pictureDelete of the file PictureController.java. Such manipulation of the argument picName leads to path…

    feng_ha_ha megagao production_ssm ssm-erp
  • Medium 5.4
    CVE-2026-2863

    feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java deleteFile path traversal

    A flaw has been found in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. The impacted element is the function deleteFile of the file FileServiceImpl.java. This manipulation causes path traversal. The attack can be…

    megagao feng_ha_ha production_ssm ssm-erp
  • Medium 6.3
    CVE-2026-2860

    feng_ha_ha/megagao ssm-erp/production_ssm EmployeeController.java improper authorization

    A security vulnerability has been detected in feng_ha_ha/megagao ssm-erp and production_ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. Impacted is an unknown function of the file EmployeeController.java. The manipulation leads to improper authorization. …

    megagao feng_ha_ha ssm-erp production_ssm
  • Medium 6.3
    CVE-2025-4768

    feng_ha_ha/megagao ssm-erp/production_ssm PictureServiceImpl.java uploadPicture unrestricted upload

    A vulnerability classified as critical has been found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. This affects the function uploadPicture of the file PictureServiceImpl.java. The manipulation of the argument File leads to unrestricted upload. It is …

    megagao feng_ha_ha ssm-erp production_ssm
  • Medium 4.3
    CVE-2025-4530

    feng_ha_ha/megagao ssm-erp/production_ssm File FileController.java handleFileDownload path traversal

    A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm 1.0. It has been declared as problematic. Affected by this vulnerability is the function handleFileDownload of the file FileController.java of the component File Handler. The manipulat…

    feng_ha_ha megagao production_ssm production_ssm
  • Medium 6.3
    CVE-2025-4333

    feng_ha_ha/megagao ssm-erp/production_ssm FileServiceImpl.java uploadFile unrestricted upload

    A vulnerability was found in feng_ha_ha/megagao ssm-erp and production_ssm up to 0.0.1. It has been classified as critical. This affects the function uploadFile of the file src/main/java/com/megagao/production/ssm/service/impl/FileServiceImpl.java. The manipu…

    feng_ha_ha megagao production_ssm ssm-erp