CVE-2022-38808

ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface...

Sql injection

ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface...

CVE-2022-38808

ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface...

CVE-2022-38808

ywoa v6.1 is affected by a SQL injection in the backend/oa/visual/exportExcel.do endpoint. The vulnerability is documented across NVD/Red Hat and other feeds, indicating an input handling flaw that allows SQL injection. Impact is described as High (C/H, I/H, A/H) with network attack vector, low p...

CVE-2022-36606

Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database...