Filtered by vendor Yimihome Subscriptions
Filtered by product Ywoa Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-38808 1 Yimihome 1 Ywoa 2024-08-03 8.8 High
ywoa v6.1 is vulnerable to SQL Injection via backend/oa/visual/exportExcel.do interface.
CVE-2022-36605 1 Yimihome 1 Ywoa 2024-08-03 9.8 Critical
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter.
CVE-2022-36606 1 Yimihome 1 Ywoa 2024-08-03 9.8 Critical
Ywoa before v6.1 was discovered to contain a SQL injection vulnerability via /oa/setup/checkPool?database.