Jinher OA 代码注入漏洞

Jinher OA is a collaborative management software from China Jinhe Jinher. Jinher OA 1.0 version of the code injection vulnerability, the vulnerability stems from the file /jc6/platform/sys/login!changePassWord.action in the parameter Account improper operation, which may lead to cross-site...