Skip to content
OpenAdvisories

Vendor

zsadmin2025

3 known vulnerabilities.

Products

ZS-Admin 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-16451

    zsadmin2025 ZS-Admin com.zs.file.controller.SysFileController upload unrestricted upload

    A security flaw has been discovered in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This impacts an unknown function of the file /api/system/file/upload of the component com.zs.file.controller.SysFileController. Performing a manipulati…

    zsadmin2025 ZS-Admin
  • Medium 4.3
    CVE-2026-16450

    zsadmin2025 ZS-Admin MyBatis-Plus Tenant Plugin page getTenantId authorization

    A vulnerability was identified in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. This affects the function getTenantId of the file /api/system/sys/dept/page of the component MyBatis-Plus Tenant Plugin. Such manipulation of the argument X…

    zsadmin2025 ZS-Admin
  • Medium 6.3
    CVE-2026-16449

    zsadmin2025 ZS-Admin com.zs.sys.dept.controller.SysDeptController page OrderItem.desc sql injection

    A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the file /api/system/sys/dept/page of the component com.zs.sys.dept.controller.SysDeptC…

    zsadmin2025 ZS-Admin