CVE-2025-15421: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in Yonyou KSOA 9.0. This vulnerability affects unknown code of the file /worksheet/agentworksadd.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit is now publ...

CVE-2025-15424: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Yonyou KSOA 9.0. The affected element is an unknown function of the file /worksheet/agentworksdel.jsp of the component HTTP GET Parameter Handler. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The...

PT-2026-1059

Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A SQL injection issue exists in Yonyou KSOA 9.0 due to manipulation of the Report argument within the file /worksheet/work edit.jsp. This allows for remote attacks. The exploit details have been publicly...

SQL Injection Vulnerability in KSOA, UFIDA's Enterprise Information Fusion Platform, UFIDA Network Technology Co. Ltd (CNVD-2024-39843)

The UFIDA KSOA is an enterprise-level application platform based on SOA architecture, aiming to provide comprehensive informatization solutions for enterprises. A SQL injection vulnerability exists in UFIDA Space-Time Enterprise Information Integration Platform KSOA, which can be exploited by an...

Information Leakage Vulnerability in KSOA, UFIDA's Enterprise Information Fusion Platform

KSOA can help enterprises in the field of circulation achieve the goals of "transaction automation, management informationization, decision-making intelligence, and business e-commerce" through the combination of different products to meet the needs of the decision-making level, management level,...

Unauthorized Access Vulnerability in KSOA V9.0, UFIDA's Enterprise Information Fusion Platform

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An unauthorized access vulnerability exists in UFIDA's enterprise information fusion platform, KSOA V9.0, which can be exploited by attackers to obtai...