CVE-2026-1133 Yonyou KSOA HTTP GET Parameter folder.jsp sql injection

A vulnerability was determined in Yonyou KSOA 9.0. The impacted element is an unknown function of the file /kmf/folder.jsp of the component HTTP GET Parameter Handler. Executing a manipulation of the argument folderid can lead to sql injection. The attack can be launched remotely. The exploit has...

CVE-2026-1133

CVE-2026-1133 affects Yonyou KSOA 9.0. The vulnerable element is the HTTP GET Parameter Handler in the file /kmf/folder.jsp; manipulating the directory parameter folderid enables an SQL injection. The attack surface is remote, and the vulnerability has been publicly disclosed. Multiple connected ...