CVE-2022-36605

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...

CVE-2022-36605

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...

Sql injection

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...

CVE-2022-36605

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...

CVE-2022-36605

CVE-2022-36605 concerns Yimioa v6.1, where a SQL injection vulnerability is exposed through the orderbyGET parameter. The vulnerability arises in user-controlled input that affects database queries, with the CVSS v3.1 base score of 9.8 (CRITICAL; Network attack vector, no user interaction require...

PT-2022-23501 · Yimioa · Yimioa

Name of the Vulnerable Software and Affected Versions: Yimioa version 6.1 Description: A SQL injection issue was found in Yimioa via the orderbyGET parameter. This allows for potential manipulation of database queries. Recommendations: For Yimioa version 6.1, consider restricting access to the...

Yimioa SQL注入漏洞

Yimioa is the collaborative office software of Cloud.com Software. Based on enterprise-class workflow engine, in-depth research and development for 15 years, served more than 1000 customers, based on springboot framework. With mature OA office functions, comes with a low-code development platform...