CVE-2025-10394

Name of the Vulnerable Software and Affected Versions: fcba zzm ics-park Smart Park Management System version 2.0

Description: A code injection vulnerability exists in the Scheduled Task Module of the fcba zzm ics-park Smart Park Management System. The issue is located in an unknown function within the ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/JobController.java file. This manipulation can be performed remotely. The exploit for this issue has been publicly disclosed.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.