Security Advisory

CVE-2025-14780

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-16 13:02:05
Last updated 2025-12-16 14:25:48
Assigner VulDB
State PUBLISHED

Description

A vulnerability was detected in Xiongwei Smart Catering Cloud Platform 2.1.6446.28761. The affected element is an unknown function of the file /dishtrade/dish_trade_detail_get. The manipulation of the argument filter results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.