CVE-2025-25580

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql method at /xml/UserMapper.xml...

PT-2025-11610

Name of the Vulnerable Software and Affected Versions yimioa versions prior to 2024.07.04 Description The issue is related to a SQL injection vulnerability. It can be exploited via the listNameBySql method at the "/xml/UserMapper.xml" API endpoint. Recommendations For versions prior to 2024.07.04...

yimioa security vulnerabilities

yimioa CloudNet OA is a locally deployed OA software by rabbit individual developers. A security vulnerability exists in yimioa versions prior to v2024.07.04, which stems from an SQL injection in the listNameBySql method...

CVE-2025-25580

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql method at /xml/UserMapper.xml...

CVE-2025-25580: Improper Neutralization of Special Elements used in an SQL Command

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql method at /xml/UserMapper.xml...

CVE-2025-1224

A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

CVE-2025-1224

A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

Ywoa SQL injection vulnerability

ywoa is an OA collaborative office system by bestfeng individual developer in China. A SQL injection vulnerability exists in ywoa version 2024.07.03 and earlier versions, which originates from the listNameBySql function of com/cloudweb/oa/mapper/xml/UserMapper.xml, which contains a SQL injection...

CVE-2025-1224: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...