CVE-2025-1227

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-1227

creationtimestamp| type| source ---|---|--- 2025-02-12 21:01:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113992931422862541 2025-02-12 21:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz3tbwzgq2i 2025-02-12 23:07:44+00:00|...

CVE-2025-1227

CVE-2025-1227 affects ywoa up to 2024.07.03, specifically the function selectList in com/cloudweb/oa/mapper/xml/AddressDao.xml. The vulnerability is a SQL injection that can be exploited remotely. Remediation provided in multiple sources is to upgrade to version 2024.07.04. Some entries describe ...

CVE-2025-1227 ywoa AddressDao.xml selectList sql injection

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-1227 ywoa AddressDao.xml selectList sql injection

A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...