Filtered by vendor Four-faith Subscriptions
Filtered by product Water Conservancy Informatization Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-10708 1 Four-faith 1 Water Conservancy Informatization 2025-10-03 5.3 Medium
A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this vulnerability is an unknown functionality of the file /history/historyDownload.do;usrlogout.do. The manipulation of the argument fileName leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-10709 1 Four-faith 1 Water Conservancy Informatization 2025-10-03 5.3 Medium
A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform 1.0. Affected by this issue is some unknown functionality of the file /history/historyDownload.do;otheruserLogin.do;getfile. The manipulation of the argument fileName results in path traversal. The attack can be executed remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.