CVE-2025-4281 - Shenzhen Sixun Software Sixun Shanghui Group Business Management System LoadData information disclosure

Back Back to CVE browser

MEDIUM

Shenzhen Sixun Software Sixun Shanghui Group Business Management System LoadData information disclosure

Published May 5, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.33%

Description

A vulnerability, which was classified as problematic, was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This affects an unknown part of the file /api/GylOperator/LoadData. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Shenzhen Sixun Software Product Sixun Shanghui Group Business Management System Default
n/a
- Version
  7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Shenzhen Sixun Software

Sixun Shanghui Group Business Management System

n/a

Version	Status	Constraints
7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-284

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-13382
Advisory
https://github.com/zhangbuneng/an-unauthorized-vulnerability-in-the-business-management-system-of-Wisdom-7-Group/issues/1
exploitissue-tracking
https://vuldb.com/?ctiid.307389
signaturepermissions-required
https://vuldb.com/?id.307389
vdb-entry
https://vuldb.com/?submit.563515
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-13382		Advisory
https://github.com/zhangbuneng/an-unauthorized-vulnerability-in-the-business-management-system-of-Wisdom-7-Group/issues/1		exploitissue-tracking
https://vuldb.com/?ctiid.307389		signaturepermissions-required
https://vuldb.com/?id.307389		vdb-entry
https://vuldb.com/?submit.563515		third-party-advisory