CVE-2026-1179

CVE-2026-1179 affects Yonyou KSOA 9.0. The issue resides in the HTTP GET Parameter Handler, specifically /kmf/user_popedom.jsp, where manipulating the folderid argument triggers a SQL injection. The vulnerability is exploitable remotely and, per multiple sources, the exploit is public and may be ...

CVE-2026-1179

A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/userpopedom.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid results in sql injection. The attack can be launched remotely. The exploit is now public and may be...