CVE-2022-36605

Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-25582

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList method at /xml/OaNoticeMapper.xml...

CVE-2025-25582

CVE-2025-25582 affects yimioa prior to v2024.07.04, with a SQL injection vulnerability in the selectNoticeList() method located at /xml/OaNoticeMapper.xml. The exposed root cause is improper handling of user-supplied input in that mapper, enabling attacker-controlled queries. CVSS 3.1 indicates a...