What is GHSA-j7j5-hcmh-jmmq?

GHSA-j7j5-hcmh-jmmq is a security advisory published by GitHub Security Advisories with Low severity. A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function...

Which CVE IDs does GHSA-j7j5-hcmh-jmmq cover?

GHSA-j7j5-hcmh-jmmq covers the following CVE IDs: CVE-2026-108777. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j7j5-hcmh-jmmq?

GHSA-j7j5-hcmh-jmmq has a CVSS v3 base score of 6.3, published by GitHub Security Advisories.

GHSA-j7j5-hcmh-jmmqLowCVSS 6.3

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function...

Vendor

GitHub Security Advisories

Published

October 12, 2026

Last Modified

October 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-108777 →

📋 Description

A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiController.java. The manipulation of the argument searchstr results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-108777
https://vuldb.com/cve/CVE-2026-108777
https://vuldb.com/submit/959609
https://vuldb.com/vuln/416557
https://vuldb.com/vuln/416557/cti
https://github.com/advisories/GHSA-j7j5-hcmh-jmmq