CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-1227

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

ywoa SQL注入漏洞

ywoa is an OA collaborative office system by bestfeng individual developer in China. A security vulnerability exists in ywoa version 2024.07.03 and earlier versions, which originates from a SQL injection vulnerability in the selectList function of com/cloudweb/oa/mapper/xml/AddressDao.xml...