CVE-2025-5388

A vulnerability classified as critical was found in JeeWMS up to 20250504. Affected by this vulnerability is the function dogenerate of the file /generateController.do?dogenerate. The manipulation leads to sql injection. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

• CWE-74
• CWE-89

• https://gitee.com/erzhongxmu/JEEWMS/issues/IC5FNVIssue Tracking
• https://vuldb.com/?ctiid.310681Permissions Required, VDB Entry
• https://vuldb.com/?id.310681Third Party Advisory, VDB Entry

Published

May 31, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53874Rejected reason: Not used
• CVE-2025-53875Rejected reason: Not used
• CVE-2025-53876Rejected reason: Not used
• CVE-2025-53877Rejected reason: Not used
• CVE-2025-53878Rejected reason: Not used
• CVE-2025-53879Rejected reason: Not used
• CVE-2025-53880A Path Traversal vulnerability in the tftpsync/add and tftps…8.7
• CVE-2025-53881A UNIX Symbolic Link (Symlink) Following vulnerability in lo…6.9
• CVE-2025-53882A Reliance on Untrusted Inputs in a Security Decision vulner…4.8
• CVE-2025-53883A Improper Neutralization of Script-Related HTML Tags in a W…9.3
• CVE-2025-53884NeuVector stores user passwords and API keys using a simple,…5.3
• CVE-2025-53885Directus is a real-time API and App dashboard for managing S…4.2