CVE-2026-124331

A SQL injection vulnerability exists in Jinher OA C6 within the file /C6/JHSoft.Web.Project/OfficeReadOnly/ProjectAfficheManage.aspx. The flaw allows a remote attacker to manipulate the ProjID argument to execute unauthorized SQL commands. Exploitation is possible over the network, and a public e...