PT-2026-57585

Name of the Vulnerable Software and Affected Versions Jinher OA version 1.0 Description A SQL injection flaw exists in the /C6/JHSoft.Web.PlanSummarize/PlanGiveOut.aspx endpoint. The issue occurs when the httpOID argument is manipulated, allowing for remote exploitation. Recommendations At the...

CVE-2026-7670 Jinher OA UserSel.aspx sql injection

A flaw has been found in Jinher OA 1.0. The affected element is an unknown function of the file /C6/JHSoft.Web.PlanSummarize/UserSel.aspx. This manipulation of the argument DeptIDList causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may b...