CVE-2022-36605

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-25582

The yimioa (CloudNet OA) software, a locally deployed OA system, is vulnerable to SQL injection in versions prior to v2024.07.04 . The vulnerability originates from the selectNoticeList() method located at ** slouch/xml/OaNoticeMapper.xml**. No specific exploit links or remediation steps are prov...