PT-2022-23502 · Ywoa · Ywoa

Name of the Vulnerable Software and Affected Versions: Ywoa versions prior to 6.1 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the "/oa/setup/checkPool?database" API endpoint. The estimated number of potentially affected devices...

Ywoa SQL注入漏洞

Ywoa is an OA collaborative office system by the Chinese bestfeng individual developer. A security vulnerability exists in Ywoa versions prior to v6.1, which originates from an SQL injection vulnerability via /oa/setup/checkPool?database...