CVE-2025-10394

A vulnerability has been found in fcba_zzm ics-park Smart Park Management System 2.0. Affected is an unknown function of the file ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/JobController.java of the component Scheduled Task Module. Such manipulation leads to code injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://github.com/Yyjccc/CVE/issues/1 Exploit Issue Tracking Third Party Advisory
https://vuldb.com/?ctiid.323829 Permissions Required VDB Entry
https://vuldb.com/?id.323829 Third Party Advisory VDB Entry
https://vuldb.com/?submit.645729 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:fcba_zzm:smart_park_management_system:2.0:*:*:*:*:*:*:*

History

14 Oct 2025, 19:40

Type Values Removed Values Added
First Time Fcba Zzm
Fcba Zzm smart Park Management System
CPE cpe:2.3:a:fcba_zzm:smart_park_management_system:2.0:*:*:*:*:*:*:*
References () https://github.com/Yyjccc/CVE/issues/1 - () https://github.com/Yyjccc/CVE/issues/1 - Exploit, Issue Tracking, Third Party Advisory
References () https://vuldb.com/?ctiid.323829 - () https://vuldb.com/?ctiid.323829 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.323829 - () https://vuldb.com/?id.323829 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.645729 - () https://vuldb.com/?submit.645729 - Third Party Advisory, VDB Entry

14 Sep 2025, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-09-14 07:15

Updated : 2025-10-14 19:40


NVD link : CVE-2025-10394

Mitre link : CVE-2025-10394

CVE.ORG link : CVE-2025-10394


JSON object : View

Products Affected

fcba_zzm

  • smart_park_management_system
CWE
CWE-74

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-94

Improper Control of Generation of Code ('Code Injection')