A vulnerability was detected in FeMiner wms up to 1.0. This impacts an unknown function of the file /wms-master/src/basic/depart/depart_add_bg.php of the compon…

A SQL injection vulnerability (CVE-2026-3969) was discovered in FeMiner WMS up to version 1.0. The vulnerability affects the Basic Organizational Structure Module, specifically in the file /wms-master/src/basic/depart/depart_add_bg.php. An attacker can exploit this by manipulating the 'Name' argument to perform SQL injection attacks remotely. The exploit has been made public and is now available for use. The vendor was contacted about this disclosure but did not provide any response.