Related Vulnerabilities仁和兴业(深圳)软件有限公司仁和云ERP purchaseOrdersaveOrderApplet.action存在反序列化漏洞友数聚科技-CPAS审计管理系统V4 /cpasm4/cpasList/findArchiveApplyByDah SQL 注入漏洞PoCCVE-2026-53787: Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File UploadWordPress WooCommerce OrderConvo 插件 /wp-json/wooconvo/v1/download-file 文件读取漏洞(CVE-2025-10162)友数聚CPAS审计管理系统V4 testOpenPDF 任意文件读取漏洞PoCCVE-2017-6478: MaNGOSWebV4 < 4.0.8 - Cross-Site ScriptingPoCCVE-2025-10162: WordPress OrderConvo < 14 - Path TraversalPoCCVE-2025-59136: WordPress Gerencianet Oficial <= 3.1.3 - Unauthenticated Order Status Disclosure中成科信综合管理平台 OrderManager.ashx 任意文件读取漏洞PoC用友U8Cloud /u8cloud/openapi/so.saleorder.briefing SQL 注入漏洞SugarCRM /service/v4/rest.php 代码执行漏洞(CVE-2025-25034)CPAS审计管理系统V4 doDownLoadPicFile 存在任意文件读取漏洞PoC友数聚科技-CPAS审计管理系统V4 /cpasm4/static/..;/mobileUploadPictureController/doDownLoadPicFile 文件读取漏洞