Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: yimihome'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2025-1227 6.5 A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated 2025-08-26 18:39:13
CVE-2025-1225 6.5 A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The ma 2025-08-26 18:39:03
CVE-2025-1216 6.5 A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cloudweb/oa/mapper/xml/OaNoticeMapper.xml. The manipulation of the argument sort leads to sql 2025-08-26 18:38:22
CVE-2025-1226 5.0 A vulnerability was found in ywoa up to 2024.07.03. It has been declared as critical. This vulnerability affects unknown code of the file /oa/setup/setup.jsp. The manipulation leads to improper authorization. The attack can be initiated remotely. The 2025-08-26 18:38:12
CVE-2025-1224 6.5 A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiat 2025-08-26 18:37:51
CVE-2022-38808 8.8 ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface. 2022-09-17 02:30:00
CVE-2022-36606 9.8 Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database. 2022-08-23 18:23:00
CVE-2022-36605 9.8 Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter. 2022-08-23 17:03:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1
Zapisa po stranici: