<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: warehouse refinement management system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-2217: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System </title><link>https://patchthecve.com/cve/CVE-2025-2217.html</link><guid>https://patchthecve.com/cve/CVE-2025-2217.html</guid><pubDate>Wed, 17 Jun 2026 09:06:33 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 1.3. This affects the function ProcessRequest of the file /getAdyData.ashx. The manipulation of the argument showid leads to sql injection. It is possible to initiate the attack remotely. Th</description></item><item><title>CVE-2025-2216: A vulnerability, which was classified as critical, has been found in zzskzy Warehouse Refinement Management Sy</title><link>https://patchthecve.com/cve/CVE-2025-2216.html</link><guid>https://patchthecve.com/cve/CVE-2025-2216.html</guid><pubDate>Wed, 17 Jun 2026 09:06:33 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in zzskzy Warehouse Refinement Management System 1.3. Affected by this issue is the function UploadCrash of the file /crash/log/SaveCrash.ashx. The manipulation of the argument file leads to unrestricted upload. The attack may be laun</description></item><item><title>CVE-2025-2115: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System </title><link>https://patchthecve.com/cve/CVE-2025-2115.html</link><guid>https://patchthecve.com/cve/CVE-2025-2115.html</guid><pubDate>Wed, 17 Jun 2026 09:06:21 +0000</pubDate><description>MEDIUM 6.3: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. Th</description></item></channel></rss>