CVE-2026-113404

Uniong｜WebITR - Insecure Deserialization

WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious serialized data, thereby executing arbitrary code on the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-13770

Uniong｜WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-13768

Uniong｜WebITR - Authorization Bypass

WebITR developed by Uniong has an Authentication Bypass vulnerability, allowing authenticated remote attackers to log into the system as any user by modifying a specific parameter. Attackers must first obtain a user ID to exploit this vulnerability.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-13769

Uniong｜WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-13771

Uniong｜WebITR - Arbitrary File Read

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-9254

Uniong｜WebITR - Missing Authentication

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-9255

Uniong｜WebITR - SQL Injection

WebITR developed by Uniong has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-9256

Uniong｜WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-9257

Uniong｜WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-9258

Uniong｜WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2025-9259

Uniong｜WebITR - Arbitrary File Reading through Path Traversal

WebITR developed by Uniong has an Arbitrary File Reading vulnerability, allowing remote attackers with regular privileges to exploit Absolute Path Traversal to download arbitrary system files.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr

CVE-2024-8586

Uniong WebITR - Open Redirect

WebITR from Uniong has an Open Redirect vulnerability, which allows unauthorized remote attackers to exploit this vulnerability to forge URLs. Users, believing they are accessing a trusted domain, can be redirected to another page, potentially leading to phishing attacks.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Uniong

Products

Webitr