Skip to content
Threat Feed
Subscribe

Vendor

Tiandy

3 briefs RSS
high advisory

Tiandy Easy7 Integrated Management Platform SQL Injection Vulnerability (CVE-2026-9465)

Tiandy Easy7 Integrated Management Platform 7.17.0 is vulnerable to SQL injection (CVE-2026-9465) via manipulation of the strTBName argument in /Easy7/apps/WebService/GetDBDataEx.jsp, allowing a remote attacker to execute arbitrary SQL commands.

Easy7 Integrated Management Platform 7.17.0 sql-injection cve-2026-9465 web-application
2r 1t 1c
critical advisory

Tiandy Easy7 Integrated Management Platform OS Command Injection Vulnerability

CVE-2026-7698 allows for remote OS command injection in Tiandy Easy7 Integrated Management Platform 7.17.0 via manipulation of the 'week' argument in the /Easy7/rest/systemInfo/updateDbBackupInfo file.

Easy7 Integrated Management Platform cve-2026-7698 command-injection web-application
2r 1t 1c
critical advisory

Tiandy Easy7 Integrated Management Platform OS Command Injection Vulnerability

A remote OS command injection vulnerability exists in Tiandy Easy7 Integrated Management Platform up to version 7.17.0, allowing attackers to execute arbitrary commands by manipulating the 'File' argument in the '/Easy7/apps/WebService/ImportSystemConfiguration.jsp' file, potentially leading to full system compromise.

Easy7 Integrated Management Platform cve-2026-4585 command-injection tiandy
2r 1t