EUVD-2025-6694

Malicious code in bioql PyPI...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

PT-2025-11620

Name of the Vulnerable Software and Affected Versions yimioa versions prior to v2024.07.04 Description The issue is related to a SQL injection vulnerability. It can be exploited via the selectNoticeList method at the "/xml/OaNoticeMapper.xml" API endpoint. Recommendations For versions prior to...

CVE-2025-25582

The yimioa (CloudNet OA) software, a locally deployed OA solution, contains a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists in the selectNoticeList() method located at the /xml/OaNoticeMapper.xml API endpoint. An attacker could exploit this to perform unauthorized...

CVE-2025-25582: Improper Neutralization of Special Elements used in an SQL Command

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-1216

A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cloudweb/oa/mapper/xml/OaNoticeMapper.xml. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotel...

CVE-2025-1216

A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cloudweb/oa/mapper/xml/OaNoticeMapper.xml. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotel...

CVE-2025-1216: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cloudweb/oa/mapper/xml/OaNoticeMapper.xml. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotel...