Feminer Wms Project Feminer Wms — known CVE vulnerabilities

Every CVE whose affected-product data names Feminer Wms Project Feminer Wms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-42897 — CVSS 9.8 (critical): A remote command execution (RCE) vulnerability was found in FeMiner wms V1.0 in /wms/src/system/datarec.php. The $_POST[r_name] is directly…
• CVE-2025-25994 — CVSS 7.5 (high): SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameters date1…
• CVE-2025-25997 — CVSS 7.5 (high): Directory Traversal vulnerability in FeMiner wms v.1.0 allows a remote attacker to obtain sensitive information via the databak.php…
• CVE-2025-25992 — CVSS 5.1 (medium): SQL Injection vulnerability in FeMiner wms 1.0 allows a remote attacker to obtain sensitive information via the inquire_inout_item.php…
• CVE-2025-25993 — CVSS 5.1 (medium): SQL Injection vulnerability in FeMiner wms wms 1.0 allows a remote attacker to obtain sensitive information via the parameter "itemid."