CVE-2025-25582

creationtimestamp| type| source ---|---|--- 2025-03-18 17:44:04+00:00| seen| https://t.me/cvedetector/20572 2025-03-18 20:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihz3ucn2m...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-25582

The yimioa (CloudNet OA) software, a locally deployed OA solution, contains a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists in the selectNoticeList() method located at the /xml/OaNoticeMapper.xml API endpoint. An attacker could exploit this to perform unauthorized...