ywoa SQL注入漏洞

ywoa is an OA collaborative office system by bestfeng individual developer in China. A SQL injection vulnerability exists in ywoa version 2024.07.03 and earlier versions, which originates from the listNameBySql function of com/cloudweb/oa/mapper/xml/UserMapper.xml, which contains a SQL injection...