2 matches found
Sql injection
ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface...
CVE-2022-38808
ywoa v6.1 is affected by a SQL injection in the backend/oa/visual/exportExcel.do endpoint. The vulnerability is documented across NVD/Red Hat and other feeds, indicating an input handling flaw that allows SQL injection. Impact is described as High (C/H, I/H, A/H) with network attack vector, low p...