CVE-2026-1178

A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /kmf/select.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-1178 Yonyou KSOA HTTP GET Parameter select.jsp sql injection

A security vulnerability has been detected in Yonyou KSOA 9.0. Affected by this issue is some unknown functionality of the file /kmf/select.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid leads to sql injection. The attack can be initiated remotely. The...

CVE-2026-1178

CVE-2026-1178 affects Yonyou KSOA 9.0. The vulnerability is in the HTTP GET Parameter Handler, specifically the /kmf/select.jsp file, where manipulating the folderid parameter leads to SQL injection. The issue can be initiated remotely and exploits have been publicly disclosed. Vendor notificatio...

PT-2026-3511

Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A security issue exists in Yonyou KSOA 9.0 related to the HTTP GET Parameter Handler component. The vulnerability is located in the /kmf/select.jsp file. Manipulation of the folderid parameter can lead to a...

Yonyou KSOA SQL injection vulnerability

Yonyou KSOA is an enterprise-level management software developed by Yonyou Corporation in China. Version 9.0 of Yonyou KSOA contains a SQL injection vulnerability, which stems from incorrect handling of the folderid parameter in the file/kmf/select.jsp, potentially leading to SQL injection attack...

CVE-2015-2165

Multiple cross-site scripting XSS vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform MSDP 4.x, 5.x, and 6.x allow remote attackers to inject arbitrary web script or HTML via the 1 portal, 2 fromDate, 3 toDate, 4 fromTime, 5 toTime, 6 kword, 7 uname, 8 pname, 9...