Skip to content
OpenAdvisories

Vendor

xiweicheng

3 known vulnerabilities.

Products

TMS 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-1062

    xiweicheng TMS HtmlUtil.java summary server-side request forgery

    A flaw has been found in xiweicheng TMS up to 2.28.0. This affects the function Summary of the file src/main/java/com/lhjz/portal/util/HtmlUtil.java. This manipulation of the argument url causes server-side request forgery. It is possible to initiate the atta…

    xiweicheng TMS
  • Medium 6.3
    CVE-2026-1061

    xiweicheng TMS FileController.java upload unrestricted upload

    A vulnerability was detected in xiweicheng TMS up to 2.28.0. Affected by this issue is the function Upload of the file src/main/java/com/lhjz/portal/controller/FileController.java. The manipulation of the argument filename results in unrestricted upload. The …

    xiweicheng TMS