4 matches found
EUVD-2025-6694
Malicious code in bioql PyPI...
6.1CVSS5.4AI score0.0019EPSS
SaveExploits1References2
CVE-2025-25582
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...
6.1CVSS8.6AI score0.0019EPSS
SaveExploits1References1
CVE-2025-25582
yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...
6.1CVSS0.0019EPSS
SaveExploits1References1
CVE-2025-25582
The yimioa (CloudNet OA) software, a locally deployed OA solution, contains a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists in the selectNoticeList() method located at the /xml/OaNoticeMapper.xml API endpoint. An attacker could exploit this to perform unauthorized...
6.1CVSS7.9AI score0.0019EPSS
SaveExploits1References1Affected Software1
20