7 matches found
PT-2026-96327
Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A weakness in the /cardcase/search list.jsp file allows for remote SQL injection. This occurs when the address argument is manipulated, enabling an attacker to execute unauthorized database queries...
CVE-2024-50724
KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...
CVE-2024-50724
KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...
CVE-2024-50724: Improper Neutralization of Special Elements used in an SQL Command
KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...
CVE-2024-50724
KASO v9.0 was discovered to contain a SQL injection vulnerability via the personid parameter at /cardcase/editcard.jsp...
CVE-2024-50724
KASO v9.0 is vulnerable to a SQL injection flaw due to the improper neutralization of special elements in the person_id parameter at the /cardcase/editcard.jsp endpoint. This vulnerability allows for potential exploitation of the underlying database. As a mitigation, it is recommended to restrict...
