Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.9
FeMiner wms 1.0: Malicious Input Can Expose Sensitive Data
CVE-2026-3969
Summary
A security flaw in FeMiner wms 1.0 allows hackers to inject malicious code into the system, potentially exposing sensitive data. This vulnerability affects the Basic Organizational Structure Module. We recommend updating to a newer version of FeMiner wms to fix the issue.
Original title
A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/depart_add_bg.php of the component Basic Organizational Structure Mo...
Original description
A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/depart_add_bg.php of the component Basic Organizational Structure Module. Performing a manipulation of the argument Name results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
nvd CVSS2.0
7.5
nvd CVSS3.1
7.3
nvd CVSS4.0
6.9
Vulnerability type
CWE-74
Injection
CWE-89
SQL Injection
Published: 12 Mar 2026 · Updated: 13 Mar 2026 · First seen: 12 Mar 2026