CVE-2022-3467 Jiusi OA hntdCustomDesktopActionContent sql injection

A vulnerability classified as critical was found in Jiusi OA. Affected by this vulnerability is an unknown functionality of the file /jsoa/hntdCustomDesktopActionContent. The manipulation of the argument inforid leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2022-3467

CVE-2022-3467 affects Jiusi OA. SQL injection in /jsoa/hntdCustomDesktopActionContent via the inforid parameter (unknown functionality) with public exploit; CVSS v3.1 metrics show high impact (confidentiality/ integrity/ availability) and a base score of 9.8. No explicit remediation/version detai...