PT-2025-32318
CVE-2025-8701
·
Published
2025-08-07
·
Updated
2025-09-03
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0
Description
A vulnerability exists in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. The issue involves SQL injection due to the manipulation of the
optUser argument within the /OL OprationLog/GetPageList file. This allows for remote attacks. The exploit for this issue has been publicly disclosed.Recommendations
As a temporary workaround, consider restricting access to the
/OL OprationLog/GetPageList file to minimize the risk of exploitation.
Sanitize the optUser argument to prevent SQL injection attacks.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾