CVE-2025-15421

CVE-2025-15421 affects Yonyou KSOA 9.0. The flaw is in the HTTP GET Parameter Handler, specifically the manipulation of the parameter ID in the file /worksheet/agent_worksadd.jsp, leading to SQL injection. The vulnerability is remotely exploitable and the exploit is public. Multiple sources confi...