Medium severity4.3NVD Advisory· Published May 5, 2025· Updated Apr 15, 2026

CVE-2025-4281

Description

A vulnerability, which was classified as problematic, was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This affects an unknown part of the file /api/GylOperator/LoadData. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Zhangbuneng/An Unauthorized Vulnerability In The Business Management System Of Wisdom 7 Groupreferences
Shenzhen Sixun Software/Sixun Shanghui Group Business Management Systemllm-fuzzy
Range: =7

Patches

Vulnerability mechanics

References

github.com/zhangbuneng/an-unauthorized-vulnerability-in-the-business-management-system-of-Wisdom-7-Group/issues/1nvd
vuldb.comnvd
vuldb.comnvd
vuldb.comnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000